Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
27-07-2024 07:07
General
-
Target
8242.exe
-
Size
2.7MB
-
MD5
79130cc29764ff4f601dec26e4bfb9ad
-
SHA1
c1a846733d0657b1aeb704ddc0576a988d97247c
-
SHA256
d11c3f35f6cf8f1eac1bdad489149452acf7546f12ca59999cfbead8116041fc
-
SHA512
68a75f56680fd0a995220fe86d6bcfb5778acb50146a8635034a47a15cf78d49d0cc1e47c204661ad84e64a5711664f3d024d3335fcee254ef4382c8de669c60
-
SSDEEP
49152:bl+h+1qs0Y/BTmFuGjHnev3kx+Skvogkey9l:blK+19VErjHnei1Gy9l
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8242.exe"C:\Users\Admin\AppData\Local\Temp\8242.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
4KB