Analysis
-
max time kernel
147s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
06-08-2024 03:46
General
-
Target
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe
-
Size
430KB
-
MD5
298a7a066f6684d6d0166cbbbfd664a4
-
SHA1
b57b4c8bd303d0779c88c7449ca296efd2ca82db
-
SHA256
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c
-
SHA512
ad341fdf136984926d27b890ab4fe807e1afd1ab97c78225aa46929192b6544f4142151f15be19b61b1f5dbab4d178d5571d8cef6d57a209f6602df4a13a2f98
-
SSDEEP
6144:lvRscHtVzjwIRFzJZ2p26+jFWXYnj9iT2ebvXmUcCqkmAO2djXH7icD53:lvRs4OIm2hWX4U2ebvRUAd77n3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe"C:\Users\Admin\AppData\Local\Temp\d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage