Analysis
- max time kernel
149s - max time network
148s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
09/07/2026, 22:08
General
- Target Opdnavko.exe
- Size 321KB
- Sample260709-1192psas5r
- SHA256 88eb7095c92720b7e09d50db7242a002470d52a04c7d41a88b540ff4a9d30c5c
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Opdnavko.exe"C:\Users\Admin\AppData\Local\Temp\Opdnavko.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Tmp681B.tmp
memory/2896-0-0x0000000000550000-0x00000000005A4000-memory.dmp
memory/2896-1-0x0000000005010000-0x0000000005020000-memory.dmp
memory/2896-2-0x0000000004E80000-0x0000000004E98000-memory.dmp
memory/2896-3-0x0000000004F10000-0x0000000004F5C000-memory.dmp
memory/2896-16-0x0000000005290000-0x00000000052F6000-memory.dmp
memory/2896-17-0x0000000005010000-0x0000000005020000-memory.dmp