Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
04/11/2024, 00:43
Static task
static1
Behavioral task
behavioral1
Sample
77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe
Resource
win10v2004-20241007-en
General
-
Target
77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe
-
Size
308KB
-
MD5
ac683fccb0d4e4360d3d157579608aef
-
SHA1
41715867eb01af6f9ec7507833704ced2ae6c5d1
-
SHA256
77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7
-
SHA512
7f6e939ac784af6ff41c11febe2781c15c2fcb192490d12e96fbabebdda8ce3f5c7e2ca9e93e4ab229b3791428425651db94021ccdd60505cdfc0e01d5d1586c
-
SSDEEP
6144:wMiDVH9izMNOzgnOfzzjpDGbwMzHnbT2w:wMiFkz4OzgnOfzz9iwMPN
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1684 77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe"C:\Users\Admin\AppData\Local\Temp\77b0e884372bf2d802e669d3f7da7ff744935a7ae7b8f02d1823006c60b051c7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:1684