Analysis
-
max time kernel
133s -
max time network
138s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
15-08-2024 12:55
General
-
Target
env/Scripts/dist/ZipEn.exe
-
Size
278KB
-
MD5
dd5e37cb05ef290b830e9c031b3baded
-
SHA1
a70115bf33449cdb48f6a24ff44a66063b5452c0
-
SHA256
8cad25398138830d6f3908a7c8928cd6fc880233cc6fb75bdc79fd3c7c690b3c
-
SHA512
76035deeea1f707369f51da09af8f8e29f1e2ff5cc355b6fee06de1fb5824b2de29d5c1826d5b461fc963ed73202899ea55e3bff9a8d23454b6a15e9b23a33fd
-
SSDEEP
6144:uxjrrKEf9+eqfWlsURNwyIolROX+t4c08n:uxjrr7F5qfMs8WdcOX+t4c08n
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\env\Scripts\dist\ZipEn.exe"C:\Users\Admin\AppData\Local\Temp\env\Scripts\dist\ZipEn.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx