Analysis
-
max time kernel
1046s -
max time network
1051s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
04-10-2024 12:06
Behavioral task
behavioral1
Sample
client nj.exe
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
General
-
Target
client nj.exe
-
Size
61KB
-
MD5
058a8b71d991427fa70d6b7d92841f64
-
SHA1
7843d0567d64f151431e777e8ce684a0c234796c
-
SHA256
c205d2e4eb3f6e767e7c866a444aa6ac35157ed479f9dda2eaef131939e600e2
-
SHA512
4ffdf2e8f6629e585abd2044778413f64c546a9a4d44359b1847be544bb905db5cb3ca28d763e662ca4a5567b887a677b30891e9cfca37db47e7487d3a51d072
-
SSDEEP
1536:t0zI/rO0+twuCiVTlTOvwo0ia9P3AwmF9bc:tYI6POiVAIHn9PFmF9b
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language client nj.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2204 client nj.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe Token: SeIncBasePriorityPrivilege 2204 client nj.exe Token: 33 2204 client nj.exe