Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/10/2024, 15:05
General
-
Target
57076a1b1613f13d58432dc78e0b4b99128616000cef89ea9136ea291b5f03c5.exe
-
Size
158KB
-
MD5
8791086a87eb695f16ca72b8c7be3df9
-
SHA1
ef9389d3fa777a14c4fea7454f5c8068d44daa39
-
SHA256
57076a1b1613f13d58432dc78e0b4b99128616000cef89ea9136ea291b5f03c5
-
SHA512
38370ff79bb4f8af546b0daaab53ce68066c134c3da667844074a7f287bb1ff26a9dda75266c74c0474e7fbc090b273be6f433ea2a47dd1b1c9a0ccbe51390be
-
SSDEEP
3072:3IIIIN2RaIjYYWW7uJzDtWUcC9MgtXkdg1i/3KCgDz3N0wTioePwk5lUbgllElfy:3IIIIN2RajVxkdbfKBmwT4//
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\57076a1b1613f13d58432dc78e0b4b99128616000cef89ea9136ea291b5f03c5.exe"C:\Users\Admin\AppData\Local\Temp\57076a1b1613f13d58432dc78e0b4b99128616000cef89ea9136ea291b5f03c5.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken