Analysis
-
max time kernel
150s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20250207-en -
resource tags
-
submitted
07-02-2025 18:02
General
-
Target
5583d1e87bc2f683f2279cd24a1c44e60aea6de82a4c01084e4974aa3f99a4fa.exe
-
Size
2.0MB
-
MD5
7577b4bdca66f43383cc9cacc4c07565
-
SHA1
658984d41ab5aa57085e7c3b700f8451e49dfd93
-
SHA256
5583d1e87bc2f683f2279cd24a1c44e60aea6de82a4c01084e4974aa3f99a4fa
-
SHA512
985635a99dd9ceffb3fcaf07398fd5cd778e1cd6212e0d719075879bde2a0188c09786a883ce3e5eaa6ba38ecda127869d752ef57b3a405a55bd015cb0ba3a85
-
SSDEEP
49152:AVImnP3ObryxvZcaS39o1LsWO4iaXT5XeM1R:A8OOaS36D5r1R
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5583d1e87bc2f683f2279cd24a1c44e60aea6de82a4c01084e4974aa3f99a4fa.exe"C:\Users\Admin\AppData\Local\Temp\5583d1e87bc2f683f2279cd24a1c44e60aea6de82a4c01084e4974aa3f99a4fa.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
394KB
MD5b3a4f1ae5e728cb3b6ff36ce5eb19fb2
SHA16f664f07de0db5fdd5df03661966af8cb42caa14
SHA25614e11c33d76104f44b7c1b94294bd6843df5ebf6b066b13733e1b5fc236daee8
SHA5128b3623ea3caec4e53ad8c26ae33c26e8d8218728e641a554c24a7b33ec95000d78f2833d155cb75ccdf76b1ad98db226a8614c9b2794cb2fec032cfad198e61e
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
208KB