Analysis
- max time kernel
101s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
03/12/2024, 13:10
General
- Target Ref#1550238.exe
- Size 339KB
- Sample241203-qeezbswra1
- SHA256 bd35a1c3b410026617e27fa3937f77f1a42ada6978afc36022e75c63677f897d
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Ref#1550238.exe"C:\Users\Admin\AppData\Local\Temp\Ref#1550238.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1168-0-0x00000000750CE000-0x00000000750CF000-memory.dmp
memory/1168-1-0x00000000009A0000-0x00000000009F8000-memory.dmp
memory/1168-2-0x0000000005A90000-0x0000000006034000-memory.dmp
memory/1168-3-0x0000000005400000-0x0000000005492000-memory.dmp
memory/1168-5-0x00000000053F0000-0x00000000053FA000-memory.dmp
memory/1168-4-0x00000000750C0000-0x0000000075870000-memory.dmp
memory/1168-6-0x00000000750CE000-0x00000000750CF000-memory.dmp
memory/1168-7-0x00000000750C0000-0x0000000075870000-memory.dmp