Analysis
-
max time kernel
115s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03-08-2024 03:24
General
-
Target
424dc14f2afdee44a3c3760e15eeafa0N.exe
-
Size
321KB
-
MD5
424dc14f2afdee44a3c3760e15eeafa0
-
SHA1
1973bd623828336882eecd9d0ef6ed2d4e2c5fa2
-
SHA256
0966ea4fbd9a736b3e378bc0139326765e5a086055c18b00f837bafd384f74e4
-
SHA512
9c59dfcd88ab3171340c958d24d57b4a42a888346edaeea613de36f0311c08033c9900fd2d6e75012d9e89b7754108bf6f63749eb919ba7046b4ccc27e56f3a1
-
SSDEEP
3072:gfKPw/6Nb8l6tYpDzo83H6JrgboTlyMvXOqms0itTBf28VeT:IKP9NC6t8zErgsTlXvXBmJitTBe8Vk
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 36 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\424dc14f2afdee44a3c3760e15eeafa0N.exe"C:\Users\Admin\AppData\Local\Temp\424dc14f2afdee44a3c3760e15eeafa0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses