Analysis
-
max time kernel
239s -
max time network
244s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
22-11-2024 02:14
General
-
Target
065988f36f3ab99ff40893c7ad756cfcc3baea1b8b5217f17cdd6e44160df0a0.exe
-
Size
517KB
-
MD5
f9da7dcf28c9e06ef9b2d39467c82f70
-
SHA1
da4b57856503f0a6473aac73a726de0d5c3cb5cd
-
SHA256
065988f36f3ab99ff40893c7ad756cfcc3baea1b8b5217f17cdd6e44160df0a0
-
SHA512
711b20ed66071836b69d1aa1dad2230ac3e470e8bf67e09780f97de93699bc6dfe9c6477b412ac92cbc4bc0e49da613e012f2437633d4149dffe19d946aab939
-
SSDEEP
3072:EhBFivy/l0If89/UZqBNSWadsT4I0iG1BlLjW/2WtCjqTrEOAYSI2SlkHdpVZyn:Oav+0IfYnNoAw/nWuWQqdSBPdpVo
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\065988f36f3ab99ff40893c7ad756cfcc3baea1b8b5217f17cdd6e44160df0a0.exe"C:\Users\Admin\AppData\Local\Temp\065988f36f3ab99ff40893c7ad756cfcc3baea1b8b5217f17cdd6e44160df0a0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
544KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB