Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-12-2024 02:27
General
-
Target
3e44b4569dbbf3b77f6bd8d232962f57269aa77d4e42e5906e460474d20bde90.exe
-
Size
4.1MB
-
MD5
8158f2604b140c677599c7e151b01caa
-
SHA1
86c85b589762df652ef89085ad524cdbe64c6788
-
SHA256
3e44b4569dbbf3b77f6bd8d232962f57269aa77d4e42e5906e460474d20bde90
-
SHA512
e9a8411406802d76f58ac938a35a707022c68a8f7d4b00cef8e020815a5990c48c7af0f06bdb1cf4a49c1d5ee21d4a2cff979414d233ae297cbf9f0dbe2d7ee7
-
SSDEEP
49152:PWhfJr3YyD89qp8eFgu/HrSHDMui9lhH8/07KJOZJcfs5HPsuvBkM+SsAeF92H2M:PeIyTKeFNPHW07KMncfaPs/AL2z5qN
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e44b4569dbbf3b77f6bd8d232962f57269aa77d4e42e5906e460474d20bde90.exe"C:\Users\Admin\AppData\Local\Temp\3e44b4569dbbf3b77f6bd8d232962f57269aa77d4e42e5906e460474d20bde90.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4.1MB
-
Filesize
2.7MB
-
Filesize
7.7MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
7.7MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
7.7MB
-
Filesize
4KB