Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
26/07/2024, 21:46
General
-
Target
mailpv.exe
-
Size
110KB
-
MD5
782dd6152ab52361eba2bafd67771fa0
-
SHA1
5c5ff30a24a3858a8e9bd531dfef885d0b2a00c7
-
SHA256
26a3395a4115355e897a7daf04551eba5e62da661d8dbae7c99205a2e74d24ba
-
SHA512
a6d22daa93cf5eb2e57684bc0e3e0c177e4a4fe0cf9e072cab188a99178892eff92241ad6d94b20da487d88ce65f2a3ffc4d6a4dc293bf375d94fbc6b0449f53
-
SSDEEP
3072:1WSVGdlouHiwfXjObBBDTn991ix689w2KQik:1Wrdl9fzOzTna689V
Score
6/10
Malware Config
Signatures
-
Accesses Microsoft Outlook accounts 1 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\mailpv.exe"C:\Users\Admin\AppData\Local\Temp\mailpv.exe"1⤵
- Accesses Microsoft Outlook accounts
- System Location Discovery: System Language Discovery