Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
25/07/2024, 12:09
General
-
Target
NzbExplorer/NzbExplorerLoader.exe
-
Size
48KB
-
MD5
1d839466fa24355682ee1da84e76efe7
-
SHA1
7ff7979385945a54b40a72899cfba441302a1e59
-
SHA256
eb180f017e36b195d689916a819113373f9ed358e6cbb24cb4d0e0a5b6e458da
-
SHA512
97d1748f4b81124d2c4cca633b9ccb5082ba24a180a1946755d0760d22515be3560c762e136bf2960a9eee1446c2bcbdee3aaf086cd0473e3595ecf038d1a877
-
SSDEEP
384:zMxw9p8bSGMKopmEOFHbVMkla/HQLIxtzZpJWSeOdU2WES2vUj9vD3WyimE:zMxw9ybiK+OF7h0/HvxDWESpB7JimE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NzbExplorer\NzbExplorerLoader.exe"C:\Users\Admin\AppData\Local\Temp\NzbExplorer\NzbExplorerLoader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx