Analysis
-
max time kernel
94s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 11:13
General
-
Target
df7304888727550298299d7fda792b1ffa14a1512a3afd86e62b2a269daa4378.exe
-
Size
146KB
-
MD5
3b27e5c91399bfd055d362558493b940
-
SHA1
58d6323b4e7f3d9ede0b31515813dc329f6e1e15
-
SHA256
df7304888727550298299d7fda792b1ffa14a1512a3afd86e62b2a269daa4378
-
SHA512
fa4a2e6a1690922277e71a7cfef2342abe0796fd0d9241db4a1f3f4fc09148c22157b161a5246effa608939b1f63c03f044680a391adef465a9842f5008537ab
-
SSDEEP
768:uQxKb3Lm5JOgqtMAyskynptyuz0ssoExjWRb3OgqtMAyskynptyuz0ssoExjWRMr:hgbbmDORyepWDoT93ORyepWDoTCbf
Score
8/10
Malware Config
Signatures
-
Downloads MZ/PE file
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\df7304888727550298299d7fda792b1ffa14a1512a3afd86e62b2a269daa4378.exe"C:\Users\Admin\AppData\Local\Temp\df7304888727550298299d7fda792b1ffa14a1512a3afd86e62b2a269daa4378.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
168KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB