Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-11-2024 17:07
General
-
Target
United.Overseas.Bank.Payment.pdf.exe
-
Size
611KB
-
MD5
6907c3c8e2814879824b061d2526bd2e
-
SHA1
0657505c0b1e8fd388d553663d7e0c3f5200eaf1
-
SHA256
d721a704452238e2c80830950bb4fecab86c4fe5b214c303afdcd84074ca2591
-
SHA512
8b3abc3238308e757d215a311fbb9cba5c7e78fae7871faceda01effd7e0e1fd2f0c46877aa4e656c0b2d9a645333aa20ed701a7ec275a29ed0325fffc2ca13c
-
SSDEEP
12288:8zBB2EzqBTMudgkVJnQb7WvpQOSSQNx6qZ5:aB2EzqBIudgkTQb7Wu58i5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\United.Overseas.Bank.Payment.pdf.exe"C:\Users\Admin\AppData\Local\Temp\United.Overseas.Bank.Payment.pdf.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
632KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB