Analysis
-
max time kernel
29s -
max time network
38s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
-
submitted
08-08-2024 11:13
General
-
Target
undetek-v6.9.6.1/undetek-v6.9.6.1.exe
-
Size
90KB
-
MD5
7b30f8bd4e2b4693a3c25c4fbc105e32
-
SHA1
af5884aeeae68af4bd6c26839c9a33549d0d3b9f
-
SHA256
f5acbf080ed8514c3ad882a711a4196ddf9e44aefcbc25e5e37eedcc26e4def6
-
SHA512
7631e04080dc5e7d12f062f10205b716887e9cad09d8e4ec272bc0ca5ec7fedcb8d3b8bbd46c38661debb828c075464c4cf3a20ee3c2c5e4c1f2ddb31297f3a6
-
SSDEEP
1536:hMgj95m++vclizVMDltmrTaCb/ywP7OY95cG+r/5KLi+de+Pe:hlo+Y2Dmna8/l7OYwGeKVc+P
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\undetek-v6.9.6.1\undetek-v6.9.6.1.exe"C:\Users\Admin\AppData\Local\Temp\undetek-v6.9.6.1\undetek-v6.9.6.1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses