Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
04/10/2024, 06:09
General
-
Target
c72f6cc11aef9a2f7a3d1c845e3d5e897be7b3a5599341efcd794ef630badc07N.exe
-
Size
383KB
-
MD5
323531380541c0751eddc6b24f238660
-
SHA1
19b97183e6b59256df6b593dddfbb3c575326ea8
-
SHA256
c72f6cc11aef9a2f7a3d1c845e3d5e897be7b3a5599341efcd794ef630badc07
-
SHA512
d211ccbeb6f2dcb8a991b62c7830c19a637162cda2a7cc23b8419340753a839ea3debcd68ee45de81037145d6381898d2f1447aa8975517f418b3bac1071ec04
-
SSDEEP
6144:VScTnhM9E2CzyQGlenlRhkkOvfpeMgYURVROnm1jZhQEyBmSiDpi6MgN:UcjjzyQGqlrkFeMgYUR/Onky5W
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c72f6cc11aef9a2f7a3d1c845e3d5e897be7b3a5599341efcd794ef630badc07N.exe"C:\Users\Admin\AppData\Local\Temp\c72f6cc11aef9a2f7a3d1c845e3d5e897be7b3a5599341efcd794ef630badc07N.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
624KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB