Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25-12-2024 22:18
General
-
Target
vpn2.exe
-
Size
1.3MB
-
MD5
fedc12761c161021b24e55df8634a0d5
-
SHA1
750bcf790aa9d2981d90a3ede63ca7856ae12eeb
-
SHA256
c18292ba5f1e7081f1afaf5e62e63823ffc1673ea59a9d62cd4ff1b8ec7e1903
-
SHA512
838333cfe967e99b8a23499a13123ddedfbbd369b968524cbc7cf442444350b985ceddf2cfa79513923f06f409759ae022d670b71b12611fae331fb40909fc7a
-
SSDEEP
24576:aOUmR8GQTNqYKRquOpr4bl0k5a4ha+lxAAkld2IfLDa+j/I+V:xR8GMKQuYr6nEs7lkWIfLDa+j/I
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\vpn2.exe"C:\Users\Admin\AppData\Local\Temp\vpn2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
1.2MB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
632KB
-
Filesize
6.9MB