Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
27-07-2024 03:48
General
-
Target
8c6f1ac547840ebdb190013853277ff0N.exe
-
Size
136KB
-
MD5
8c6f1ac547840ebdb190013853277ff0
-
SHA1
1fb9da8b94d03702aadc24fd8f66d6b04e34c3ff
-
SHA256
c005eceaf2103414dc0e55daa5b53ae4ac2f4b2065393fecf69df0afa7db612a
-
SHA512
e7a4af272c3cb4ce41b8bb79452ed5b5807da1cf6cc419346d1ecc0d3d8258824f182cea32a96e0c6538ab510c6030d796e4ebcb60e0c9a936d07147942979a5
-
SSDEEP
3072:wRnLy8MWmJf38TdTa1qXaPIdtXcS77Xd8ZWTnKYN:wpQeRa1k6IPMETd8ZsK8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8c6f1ac547840ebdb190013853277ff0N.exe"C:\Users\Admin\AppData\Local\Temp\8c6f1ac547840ebdb190013853277ff0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam