Analysis
-
max time kernel
110s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03/08/2024, 05:03
General
-
Target
zBoxbackup.exe
-
Size
577KB
-
MD5
c907e02de12f28201c9c278800db121a
-
SHA1
552e4969380ca593d6b3a9d77a36f6dc5a9ec850
-
SHA256
a57abfcb95d00c9ce3c9ee940c40cd89d4ea3a7af13f3c2d88eec3bb403803f0
-
SHA512
5263e624900225965371a74fe08e1ecdfa309c5474817496b712ce5fe78248e078b2cbaec6d070544e6b8deff7e2c09c91ba69d93d3f30462c5d9b9baf464e50
-
SSDEEP
12288:Q16qmo/EFI7ZRtuPIw4QvIicjFXMxBdRvFnktpu:Q6c/BlQX4QgjFcj9S
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\zBoxbackup.exe"C:\Users\Admin\AppData\Local\Temp\zBoxbackup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
604KB
-
Filesize
4KB