Analysis
-
max time kernel
120s -
max time network
22s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
03/08/2024, 05:03
General
-
Target
zBck.exe
-
Size
507KB
-
MD5
aa02597ffc2587e97598ecc937b3c65b
-
SHA1
092457a25ff5ab11e5cf7ff0c895424bc3c73255
-
SHA256
37527606cd98f6c7e2882af3c4091280e43e41ca9e44c7ed1521766c6f2a791c
-
SHA512
73cf4d7d9d0de6822d5425d3230d28de164c8eb444528e09c24c45b5405ea1e6d8a3007d5de6f3e5f84a341e5a8acb989543fbb19f7678730b564eaae93b6b74
-
SSDEEP
12288:OzOw90/222g1RtO937Et5PvkRSzWArk3OqXhS9:o/a/2S1RArEbvwSCLOqx
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\zBck.exe"C:\Users\Admin\AppData\Local\Temp\zBck.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
532KB
-
Filesize
532KB
-
Filesize
4KB