Analysis
-
max time kernel
179s -
max time network
182s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21/10/2024, 19:23
General
-
Target
Portaflio Prioritario - Informe de Robo 21 de Octubre/Consolidado Prioritario - Informe de Robo 21 de Octubre.exe
-
Size
130KB
-
MD5
5af3ce90fc3fa5c03a2e45b20667c285
-
SHA1
4a4926267eda634af0c47b2b1e1c53bb159d0ea0
-
SHA256
9f804739f1168e139d5cbc1a66dc2c3f858d626274d5c0e25b60c9547782b5e9
-
SHA512
34ceeef28316fbbb228f63ac63044de5c154ab694189063ce961260327ab9c8701be9622356aa1eca275062ff11b74a20997418a6231b406c935543a0ebf9e05
-
SSDEEP
1536:0hZKhinXt1nnXdIKREzLsY9bBFDEqrfURuwncv+xk89sY7VCpEqBOQ9Xmf0Zh+E+:ywyvdIKREzLdnG8Eh8Xmf0ZgvbR
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Portaflio Prioritario - Informe de Robo 21 de Octubre\Consolidado Prioritario - Informe de Robo 21 de Octubre.exe"C:\Users\Admin\AppData\Local\Temp\Portaflio Prioritario - Informe de Robo 21 de Octubre\Consolidado Prioritario - Informe de Robo 21 de Octubre.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
152KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB