Analysis
-
max time kernel
7s -
max time network
0s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
30/03/2025, 20:20
General
-
Target
cf36f37eb8d3f695dfc8e0f4b0955e0f746df010f8ca0bf2b658e075597fcc36.exe
-
Size
978KB
-
MD5
0c2edddc52b7af556b9e4052ce41f638
-
SHA1
8db72bc3395f7e42baa709733d81d7c50e9d1dfd
-
SHA256
cf36f37eb8d3f695dfc8e0f4b0955e0f746df010f8ca0bf2b658e075597fcc36
-
SHA512
65a8f124b864e83cdb1634c6455411dc3458148a828a1fa02217b9b15bda6dfab125f4a135ca0993ef97baa4852a052fd4a0d8ee5dbee3d80e5d9255c9cb70a8
-
SSDEEP
12288:Jp+rgRNyA55IxJ+feDOa9rZj5XqkJD0QrOod7XxlW91RRz9FQq:JpugRNJI1D39dlfGQrFUx9FD
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cf36f37eb8d3f695dfc8e0f4b0955e0f746df010f8ca0bf2b658e075597fcc36.exe"C:\Users\Admin\AppData\Local\Temp\cf36f37eb8d3f695dfc8e0f4b0955e0f746df010f8ca0bf2b658e075597fcc36.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB