Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 03:26
General
-
Target
cfffc6904b007522f6fb83eec19263b73b85e28a005280959aabccb826326465N.exe
-
Size
2.2MB
-
MD5
f84ec31e56bc94a3af0f0925fde27140
-
SHA1
c713d1e9aa6981572db1b7c4e47f27a05880e69b
-
SHA256
cfffc6904b007522f6fb83eec19263b73b85e28a005280959aabccb826326465
-
SHA512
754cbbad94c14387e0bab606e647012e0d6bdb2e2995aaf1dbe2e4f80290954c2a78b1d894e0960aa73c1871eb4c16684fd60fc11c9f5badf0dab3f7d5676809
-
SSDEEP
24576:ZJjVE2fh4Co0te+4MGwAvcrCVcPM9W4OnkSCIpUlZXUbOpz:ZVVEaSoecXpUlZX3pz
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfffc6904b007522f6fb83eec19263b73b85e28a005280959aabccb826326465N.exe"C:\Users\Admin\AppData\Local\Temp\cfffc6904b007522f6fb83eec19263b73b85e28a005280959aabccb826326465N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken