Analysis

  • max time kernel
    440s
  • max time network
    443s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240730-en
  • resource tags

    arch:x64arch:x86image:win11-20240730-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    01-08-2024 20:53

General

  • Target

    ffprobe.exe

  • Size

    2.3MB

  • MD5

    9f8cefcafdef38c4e81240e52fcd3a3d

  • SHA1

    441742f03401f4846cd00fdb4a360083d59cf233

  • SHA256

    39037fcd5d12cb0037e5743c7e9905954d0af1517b28e37d75af51dbbc1082a0

  • SHA512

    7fec60bd9bb12eb39b4238ec184f0493ab2e850160ebe0caed82a01e611ff4072fb8af0c781b2a6ea1696ced32b4df66a123dd9338a8d9ad1882fda0141d6ac6

  • SSDEEP

    49152:vFJXu4G4MCd5KgepmfCHLybvfdS1ynY1wg4dm:vXXu4BMCd5nepiCHGbvfdS1ynYn4d

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ffprobe.exe
    "C:\Users\Admin\AppData\Local\Temp\ffprobe.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4084-0-0x00000000000B0000-0x000000000042F000-memory.dmp

    Filesize

    3.5MB