Analysis
-
max time kernel
112s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
01-10-2024 15:07
General
-
Target
d5e2d41c6766c1fcbd50768faf3b116efccb3bbcafda82fc8334f3a6265b4554N.exe
-
Size
27KB
-
MD5
dda8cf51441430d09a05f60039ad46b0
-
SHA1
7ece230455c7d2ed695a5037a76ceb1f03a928f7
-
SHA256
d5e2d41c6766c1fcbd50768faf3b116efccb3bbcafda82fc8334f3a6265b4554
-
SHA512
3005e93e7793103100969fc3ca47b5af49223cc53687e972257d6acec0b6f01103ca330ecf3d8054628bcfbbb96338518ecf48213b5a8b26bba269d8e7fa2983
-
SSDEEP
384:SLG9fLKCJ1G4APoWahxolxQmCYPPdR9MZAQk93vmhm7UMKmIEecKdbXTzm9bVhcj:MXUEIwxWZA/vMHTi9bD
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 27 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d5e2d41c6766c1fcbd50768faf3b116efccb3bbcafda82fc8334f3a6265b4554N.exe"C:\Users\Admin\AppData\Local\Temp\d5e2d41c6766c1fcbd50768faf3b116efccb3bbcafda82fc8334f3a6265b4554N.exe"1⤵
- Drops startup file
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB