Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14/10/2024, 12:51
General
-
Target
9b73e0e2f6d363c7e4558d089c8e3c97f664961534c51e5a14f63d61ab93e9b5N.exe
-
Size
4.8MB
-
MD5
54442405ff701e98926cfd0d6d20a710
-
SHA1
952c78cb15b0de1476eaf7d552c168a9f89f5f37
-
SHA256
9b73e0e2f6d363c7e4558d089c8e3c97f664961534c51e5a14f63d61ab93e9b5
-
SHA512
00e0ddaf291dca24f6c10195ed8878ba1fe92df3665094df74e7bf75a4d108a17a59ccf22cf3d492a27bfde1ba91cd988a91705aa5197cb67947cdedd374678d
-
SSDEEP
98304:69rAo0zboIXRe4XKjFT4qsPkG5S369oHdUHt6Nw1w359XWwkEw6d+7uiDu+:62o03oIXcjCqsl5S36fHAK1wJX47uCu+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b73e0e2f6d363c7e4558d089c8e3c97f664961534c51e5a14f63d61ab93e9b5N.exe"C:\Users\Admin\AppData\Local\Temp\9b73e0e2f6d363c7e4558d089c8e3c97f664961534c51e5a14f63d61ab93e9b5N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.7MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.4MB
-
Filesize
5.7MB