Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29/03/2025, 21:04
General
-
Target
3a93198066469651b43a90914453005741f0cc54d5f59e826442567a000e37e8.exe
-
Size
487KB
-
MD5
d51fcee93f06d8ecc4c4b253ab1471cc
-
SHA1
23d7ea092f012a99e439effd3b144f22d4c4db48
-
SHA256
3a93198066469651b43a90914453005741f0cc54d5f59e826442567a000e37e8
-
SHA512
86fb8307d3be762c7ebaf18013c9823051b72b27e84c11161234ce27f59ea44c22d07b15b0ffe7627a72aa569a3f16b12d29ab561c2c8c72e4d57c8d0794153a
-
SSDEEP
6144:PIlSCa0RPvRz+n8Qr1D0ZGESuHabmvHOE4mCp6qtydBnP+Y4+3sAORZGFX3Xc6m1:P200OFp+G0imvHn3Cp6qyBP+YdsvZGG
Score
10/10
Malware Config
Signatures
-
UAC bypass 3 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
System policy modification 1 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a93198066469651b43a90914453005741f0cc54d5f59e826442567a000e37e8.exe"C:\Users\Admin\AppData\Local\Temp\3a93198066469651b43a90914453005741f0cc54d5f59e826442567a000e37e8.exe"1⤵
- UAC bypass
- System Location Discovery: System Language Discovery
- System policy modification