Analysis
-
max time kernel
30s -
max time network
38s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-10-2024 21:52
Errors
Reason
Machine shutdown
General
-
Target
5da0b3305b8713321af3ba16212ed96674397261e2cacb63075025faeefc6993.exe
-
Size
5.9MB
-
MD5
79e82aa7281d8ee8bd4cbb6ce3fa9d30
-
SHA1
7c6fc570af37e0c5864de4830d098b7f17b9723b
-
SHA256
5da0b3305b8713321af3ba16212ed96674397261e2cacb63075025faeefc6993
-
SHA512
a652a15282d229199508518d912b38d53da46f287de200595564644563c2be3e675005b84c5acc2456a8baf019fa832fee7431558dda209822f60dc8cffba8db
-
SSDEEP
12288:9Pt/nREznmTkZAP9WmIyXuwfYkI0MytARujKL8xSvEpZm:7oD0YkY
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5da0b3305b8713321af3ba16212ed96674397261e2cacb63075025faeefc6993.exe"C:\Users\Admin\AppData\Local\Temp\5da0b3305b8713321af3ba16212ed96674397261e2cacb63075025faeefc6993.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB