Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
22-12-2024 04:57
General
-
Target
New Client.exe
-
Size
164KB
-
MD5
c0176890b7a76bc4b4361994288794ec
-
SHA1
fad41ab4f12c10d01609f3d9c821baeab407304f
-
SHA256
62cdff077aa0bd67d1b52e1d5e5b5aa34ec9e74dd2d2440f6b02d2f73a249b6e
-
SHA512
82509544d7637b7d87ca04e3335bd36816683e17f34787523556b2c35816770f36f5166fa022565f37b1b0c1898031266bf618f0fdec92fabbe5efa240e919e3
-
SSDEEP
3072:j6GN/4ZmTcci+ui9vhggOYyKqvO5ctEs+SNwCUbEM09a8U:j6f+ui9vq4qvAsNNObTO
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\New Client.exe"C:\Users\Admin\AppData\Local\Temp\New Client.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB