Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04-10-2024 17:29
General
-
Target
pago.bcp.pdf.exe
-
Size
1.4MB
-
MD5
092beeec1cfbe99c40299d954bacc8da
-
SHA1
55d56f40c256fa3eab78e3a58d5584894393e673
-
SHA256
a0805b60c79c0edd1b7acee3ab9dc807e1c065c4c2575bceefe0ccf7f6524471
-
SHA512
0515b42cf01c247f4096fd50df8c4f28c61bd378b7ebf11c02aca9fad0cca34c7f48eca5f1ecd3641be17e89d08b71569ee52934313c1b86b8f3280e985a0814
-
SSDEEP
24576:KSEM0TpgTCUTJEjSE80TtgTHUTRrL63LYi+t/eW5934XskzuoUuOxtHmURi3AEFV:XkRcskzUuytHmz3AE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pago.bcp.pdf.exe"C:\Users\Admin\AppData\Local\Temp\pago.bcp.pdf.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB