Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
07/08/2024, 08:41
General
-
Target
9427498e06353bb68497e4343f87e390N.exe
-
Size
3.1MB
-
MD5
9427498e06353bb68497e4343f87e390
-
SHA1
aa14536a04a646c3f1dc518d268e34857e6d9ddd
-
SHA256
8562cad6197da90b8eb331dbe2410770308557dfa907048ae26ee196dc1dc7c6
-
SHA512
9a357eff6f4888432ea2ce62207793ef3e561da32a2b64e2d96fac81807ce51163935f8b5fa1036f5b7e6f5305a889e0bb5bcb06322eddc2092bb9734e7b0a6c
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ6P:pCKVEE88c2rIKWe9w4
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9427498e06353bb68497e4343f87e390N.exe"C:\Users\Admin\AppData\Local\Temp\9427498e06353bb68497e4343f87e390N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage