Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
24-07-2024 08:36
General
-
Target
625.exe
-
Size
2.3MB
-
MD5
2317f3d19e243ca2d62bbc34ccb438ed
-
SHA1
27975394a1e6abed2340bd29369c3e4a4c90096e
-
SHA256
eafc440bdf703108703a6cf70aaebce8f0546717f394a7cddf54184783cace9b
-
SHA512
a47e555ce6a4df9648bcccf15a0c9f901e2f6d94d05680b0366d2d2b0dd6bdfafed5ebbc1778b45d9c9f77e33bcbb63c5e55eeaadd9a7617ece65f89864db14d
-
SSDEEP
24576:Velo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVf6xquGjHneFUJfKN6kt3dA:wl+h+1qs0Y/BTmtuGjHnevNxZm
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\625.exe"C:\Users\Admin\AppData\Local\Temp\625.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
4KB