Analysis
-
max time kernel
7s -
max time network
164s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
02/12/2024, 16:10
General
-
Target
tmpfile-main/KOSTYAMANIPULATOR.exe
-
Size
9.7MB
-
MD5
21f26636a39c0e60ab5053fbf82df5a9
-
SHA1
c7b1b2e60837e773de6df6eba4a73d658f1937f8
-
SHA256
9ea24fd5d0243dd41cfedf445bbd328b04ab2f21917d1b93fa2333687006f219
-
SHA512
5840c5f190ae5732f16e529563c51215f2be5f03b7194abb1b480b9c8bb7cf2e24851673b7c6990dcd8b1907344b0863e6aad644259010118d314fe7aa6af7ea
-
SSDEEP
196608:FZeO36tXOGEjU2+6T8N1/lCw6fUpxgJcgsTqMXY:FZeOMXObyS8N1WfUpEcgs
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmpfile-main\KOSTYAMANIPULATOR.exe"C:\Users\Admin\AppData\Local\Temp\tmpfile-main\KOSTYAMANIPULATOR.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\sihost.exesihost.exe1⤵
-
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.1MB
-
Filesize
4KB
-
Filesize
15.2MB
-
Filesize
15.2MB
-
Filesize
15.2MB
-
Filesize
5.1MB
-
Filesize
15.2MB