Analysis
-
max time kernel
140s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-10-2024 12:22
General
-
Target
[Suamaytinhtainha115.VN] Windows 8 Loader/Activator360.exe
-
Size
35KB
-
MD5
7394710a10c38b0158053e2e3cbbb9e6
-
SHA1
93c540d9345b1373a19aa64e540b13d12d4532bc
-
SHA256
60152c0a466e6b7bacc4b1980088817a79c467ab0deb6f07f6fb90d3f1b17ccb
-
SHA512
1715f5e18a9652ce328636dcdbd0f60607ff4b7213f3b213392821e1afd1e471a1774e21d27633643fa4130bfe1d955f127a62ebf526ae0d20d53332c3668024
-
SSDEEP
768:U/yhTRVnCs8P9K7jPGM4jMaUiOMZXbvkTKmBS79i/QFnJVI1tL4:KUnD81lMEHOMNvko790QFJ61i
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\[Suamaytinhtainha115.VN] Windows 8 Loader\Activator360.exe"C:\Users\Admin\AppData\Local\Temp\[Suamaytinhtainha115.VN] Windows 8 Loader\Activator360.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB