Analysis
-
max time kernel
134s -
max time network
140s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
15-08-2024 12:55
General
-
Target
env/Scripts/dist/Zip.exe
-
Size
279KB
-
MD5
32389d929fb42fabcd772ba3cbaf24a4
-
SHA1
eb3bddf42eec784ee76002a70dd8f9ad0f55f0fc
-
SHA256
e28a5cd51ccf09bec05931ff86519baaa2066d992852e0953faa98f98bf3ad45
-
SHA512
6555948d74b3b0e633c0786ad2a60e01d7c6b363d83b2a8614bd16840d42fe1f844db0d3c90ec5799457b1f649671ef7e845c11feeb37ef43a03ed689f1d7fd5
-
SSDEEP
6144:qxjrrKEf9+eqfWlsURNwyIolvT+tk108n:qxjrr7F5qfMs8WduT+tk108n
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\env\Scripts\dist\Zip.exe"C:\Users\Admin\AppData\Local\Temp\env\Scripts\dist\Zip.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx