Analysis
-
max time kernel
300s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
22-11-2024 03:31
General
-
Target
info[1].exe
-
Size
129KB
-
MD5
270b8ce04a9f55809938430a2fe6bb47
-
SHA1
2166a3a41a65bacf5d53f62d432a67fb8a0dacbe
-
SHA256
df7b73c2a36286d3d328128c00136f4c89e9c7263ca281b1af44ec06a43c61d2
-
SHA512
3eb31dc1afbc5f012b8fae8ffa51a31a37daf1b5eeb308dd7ccc318fdebf6a3fa14f52132a18d914a527b0d6be32e908728c40253501805815fe5c4af31f8590
-
SSDEEP
3072:s8Gahi/GgReBJ3wk2dn9KXtTPRmvnI9QCQyT6ykbI:lGvGTSk2dn9KdTUvI16d
Score
10/10
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\info[1].exe"C:\Users\Admin\AppData\Local\Temp\info[1].exe"1⤵
- Modifies WinLogon for persistence
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
504KB
-
Filesize
64KB
-
Filesize
504KB
-
Filesize
64KB
-
Filesize
504KB