Analysis
-
max time kernel
130s -
max time network
131s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
26-12-2024 09:37
Behavioral task
behavioral1
Sample
Downloader.exe
Resource
win11-20241007-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Client.exe
Resource
win11-20241007-en
windows11-21h2-x64
9 signatures
150 seconds
General
-
Target
Downloader.exe
-
Size
6KB
-
MD5
b97040a290f555106f334a3284333c96
-
SHA1
775436255ec3fd7b9da057ded89f0cc86d57f9f8
-
SHA256
85774f447af6eda4b39f141c309bc03284bf7e43927dbd3231a4f2ccd4255427
-
SHA512
b6c7b5c8a5e90916d2bf3e1bc7bb93f2fad935da99d3e175bc42fcf677f5bc30e0235892172e8236dc104924e03919ee0abcf6d08cdb537d61e43c6faf727226
-
SSDEEP
96:qd0zfQkbIY6boyloS9mMjrmuPovKkUYVzNt:fompCXm8vQv
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Downloader.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3108 Downloader.exe