Analysis
-
max time kernel
94s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-11-2024 21:51
General
-
Target
$PLUGINSDIR/setup.exe
-
Size
3.3MB
-
MD5
023dfce70301896fb6b2e15eca718549
-
SHA1
64bf799250c2d437b8dd2f0c7c7e6509394565d9
-
SHA256
9140755badab25fcca359fe83f74a4a435ec6136302ddafb489a90f563ad4157
-
SHA512
e47fbb80e62a02018ffd0484e21d9f80bd6469ef0df745d7f5aff7bc5ca91a487bbbcdc2d0a9b0c67352a33c97bced3f0184ba42960f1cf7c6313004fbf4eede
-
SSDEEP
98304:lR41UPttYZbwA2PNb8XxD3GH5X3ng8SCC6akRuLy:M1eY3xbGZXXg8SCv+Ly
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\setup.exe"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.3MB
-
Filesize
7.7MB
-
Filesize
7.7MB