Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19/08/2024, 11:59
General
-
Target
SoundToys.v5.0.1.10839.exe
-
Size
74.1MB
-
MD5
d30f6f81b2fdd4d6224928d266dbf2ac
-
SHA1
efbdda4a8e94a9f87a22f2f024f6a68ae273c947
-
SHA256
dab30d62f51f4b6eccc928bcb1dacf75a079e820516ed08d774ad8414c21d50b
-
SHA512
cf98d052f299d7767df22ce839efd0df333668ec5b80d497021755e1b3e6d92e5acfeb56af4da86f96120921cbaab78863c9880d3f342150473a5e0ff47030d7
-
SSDEEP
1572864:2rx9ZBTlXnF/MU85CdxtfjG8LoLGAFZIM1Z1v5cMaAu8xHyHPQvakjOq3OyBUnkM:2d9ZBTBnFXdn70iAp1fxcMaAlSvQ93rc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SoundToys.v5.0.1.10839.exe"C:\Users\Admin\AppData\Local\Temp\SoundToys.v5.0.1.10839.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow