Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
28-12-2024 01:02
General
-
Target
e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8.exe
-
Size
843KB
-
MD5
574ba4bc9851970c901d0ba9156f47fa
-
SHA1
171f47ef050add0f5c2fb917e9c6dcc4beae76bb
-
SHA256
e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8
-
SHA512
ab024d27086eac1bde1593c51592533bd11adf9579a8732243d9e12e7b7a410b8edbc1cfc92c0934de45317742d7c5897b3842048063a5af46a15055b7f2c3c8
-
SSDEEP
24576:3RS04YNEMuExDiU6E5R9s8xY/2l/d7EIbt+r2:3T4auS+UjfU2T7EIbt+r
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 36 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8.exe"C:\Users\Admin\AppData\Local\Temp\e7d021645ef4baa0f584df3b87a4da06f42bc16025b092f1f357ac5819a88ff8.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB