Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-10-2024 21:00
General
-
Target
ae233736eccad67563e7c9d5e2636253.exe
-
Size
21KB
-
MD5
ae233736eccad67563e7c9d5e2636253
-
SHA1
b3a333728028c0bc861e12e084961a7009ef26bd
-
SHA256
940d1251aa1a8c863182a16ef1f90de045e890b49dbbeeb35b3b2c3023ef4296
-
SHA512
ddc92c0c0d1329499e1342ce5fc2fbd0bb46af08787ebec2df3cccb0089b423980a5a71fd845942e18db05ec43a967d6b059a2e350e02dd4e250c4da815fc256
-
SSDEEP
384:HZszjj4jj9SppteWZJHo39Mp7e2BQHNx/rvkKSO8SnRr96R4:Ozjj4jj9GAWZIMZeH/zg4Roa
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 64 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae233736eccad67563e7c9d5e2636253.exe"C:\Users\Admin\AppData\Local\Temp\ae233736eccad67563e7c9d5e2636253.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB