Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 18:05
General
-
Target
fa998821b0fce693257acab7aa9b42636e9b8ac494a83f616d327d2dae814838.exe
-
Size
158KB
-
MD5
589af15cc9098cb0006bcbd3d01194b7
-
SHA1
82e16c2f2445b1967394982f50296ae6e4e821ad
-
SHA256
fa998821b0fce693257acab7aa9b42636e9b8ac494a83f616d327d2dae814838
-
SHA512
95e63b90d1dcf4433b0eed3ff78215dd9bcadfe21f767bdfc415158530fb8a5ae952ffc2e9af6b835daee791e0d759b16c794ce8fd4fce19169cb1764dafe3c3
-
SSDEEP
3072:2IIIIN2RaIjYYWW7uJzDtWUcC9MgtXkdg1i/3KCgDL3N+wTioePY25lUf7lvElaX:2IIIIN2RajVxkdbfKBkwTyQX
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa998821b0fce693257acab7aa9b42636e9b8ac494a83f616d327d2dae814838.exe"C:\Users\Admin\AppData\Local\Temp\fa998821b0fce693257acab7aa9b42636e9b8ac494a83f616d327d2dae814838.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken