Analysis
-
max time kernel
11s -
max time network
12s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
10-12-2024 14:15
General
-
Target
tmpk7iqd9lm.exe
-
Size
6KB
-
MD5
699f560ef94b40660358d8266df4ece0
-
SHA1
91c9c7c8081f3744482e1c91e461b9801dd9fb8c
-
SHA256
8ac294da2b5fed0f7d472c1085839526e554f0fcb61dee906db7d3a7e614274a
-
SHA512
68f91d686d5aedc506540c925ed83157e88c1527c672350cb42ca959af30d0b7a250138a2297bb7e247cf1bb0b59b119bc0a59406b1c6c13761a2527cb2aa3b1
-
SSDEEP
96:cDD5/TKf21gKbv5z+jLkG5wFDnLj7K9K8OHPl5TzNt:E5/TgSzKLkGWRnH7KTOHt51
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmpk7iqd9lm.exe"C:\Users\Admin\AppData\Local\Temp\tmpk7iqd9lm.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB