Analysis
-
max time kernel
180s -
max time network
181s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22/10/2024, 18:46
General
-
Target
Se le invita a presentarse ante el mencionado juzgado en un plazo no mayor a 3 días, con el fin de.exe
-
Size
398KB
-
MD5
923191786539b85f05801a82c5d34044
-
SHA1
5b05c3e94c78de881743b64fbf655dd7a4d5a4ed
-
SHA256
2c3bba8949c6ebeb2f81764c614733e5f81800b5de059f1f16afe6074d5f83e6
-
SHA512
54294237c5e4e96b28a958c2bf7cfd7056db3833356b2a473a6da00f2434cb4fbb6a9266df969c1132b0416d1b6d5f62a5bc3b68c836e8ffed28b844d32b3d98
-
SSDEEP
768:5wv79pvtx0gODbLTL7tg7SYQQzcrN2RgFxhjpjOOZFYe4J0v/CBN7BFeQaZTog1:5wRVWr7tgCWcE0xp9OOR4aXOYfP1
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Se le invita a presentarse ante el mencionado juzgado en un plazo no mayor a 3 días, con el fin de.exe"C:\Users\Admin\AppData\Local\Temp\Se le invita a presentarse ante el mencionado juzgado en un plazo no mayor a 3 días, con el fin de.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
424KB
-
Filesize
24KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB