Analysis
-
max time kernel
128s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-08-2024 23:14
General
-
Target
7646326177397bbf4f44b452080e837f6f25f1fe213320f861d8f3911085097c.exe
-
Size
360KB
-
MD5
4f311958c6b4b6a812ae38f69ae84c56
-
SHA1
63c571c3024aec7aa45194040a3dbcfbb19231d6
-
SHA256
7646326177397bbf4f44b452080e837f6f25f1fe213320f861d8f3911085097c
-
SHA512
0d93b0b01bddf1e466377ccc1b0af35bc25cc52a35818cba95092d792fec610578aa9ce0bf47239844a7d9c9219b453b13d9d383a4aad01eb2803c00e7c44016
-
SSDEEP
6144:JxZe/KW/q8Lae1PJv6uoe8JhFU0PXabRUqeDPrWTBHUBls61VsuZ:otBae1PAu6JhFUCXajebrWTFohZ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7646326177397bbf4f44b452080e837f6f25f1fe213320f861d8f3911085097c.exe"C:\Users\Admin\AppData\Local\Temp\7646326177397bbf4f44b452080e837f6f25f1fe213320f861d8f3911085097c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx