Analysis
-
max time kernel
112s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-11-2024 14:45
General
-
Target
511a0cdc61c338825efad96c877972f4095f0c1405c4c5fc89a1bf66a1a48331N.exe
-
Size
27KB
-
MD5
9f73345df18a214447e4bc9a0ea55fb0
-
SHA1
26f74098682eebba20da366912d44548c2113c4a
-
SHA256
511a0cdc61c338825efad96c877972f4095f0c1405c4c5fc89a1bf66a1a48331
-
SHA512
1bf1ca9cc591af98e029ee3b9807812f3952f2baed9bf489da52c51fd834bbddaff048d09adf3d6c0785204be117b3db99aeede2d7b62eb7521c68b3e2088673
-
SSDEEP
384:gLRTAXeOGgkBANvcF8smWPpJRzMVAQk93vmhm7UMKmIEecKdbXTzm9bVhcakc6V1:+Z6CUNeeVA/vMHTi9bDk
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 27 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\511a0cdc61c338825efad96c877972f4095f0c1405c4c5fc89a1bf66a1a48331N.exe"C:\Users\Admin\AppData\Local\Temp\511a0cdc61c338825efad96c877972f4095f0c1405c4c5fc89a1bf66a1a48331N.exe"1⤵
- Drops startup file
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB