Analysis
-
max time kernel
93s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16-11-2024 22:34
General
-
Target
17-10-2024 #20/UtilMan.exe
-
Size
184KB
-
MD5
39104e19c78fe4dfa91ce0fc94452680
-
SHA1
5828a04b7414f3a0e3e1be381449a38a4c8c8281
-
SHA256
05bf98c4a5ad8a594d9df4a69826ca683bc45439a9ed507734b882292223a3de
-
SHA512
cf2dad8281fe40f96ea01cd36472f4cbdb01c9d13c0878ba198a13afe7faf9aedb880e5ef8d08a6fdc63497f37fe71e66a736cce94143633f01bc5fe3f0275f4
-
SSDEEP
3072:oQ1oVVeIS0IERIIkIOhKDgEmeOSTAzrlX/T4iQy8srFCQuE:ojVVeIdkIDOSTEV4fy8sZC
Score
3/10
Malware Config
Signatures
-
Event Triggered Execution: Accessibility Features 1 TTPs
Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\17-10-2024 #20\UtilMan.exe"C:\Users\Admin\AppData\Local\Temp\17-10-2024 #20\UtilMan.exe"1⤵
- System Location Discovery: System Language Discovery