Analysis
-
max time kernel
101s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-08-2024 16:28
General
-
Target
a788566a61e73cf374dfa51e567195a0N.exe
-
Size
3.4MB
-
MD5
a788566a61e73cf374dfa51e567195a0
-
SHA1
8a8406f7b1f52737173959da1ae334bf6ac29926
-
SHA256
72680e9e880237b9886c659b5d1dd448428b790c81bb69f22e13a7fe6149962f
-
SHA512
478b8bc344e3c00f78c9beea21d559c10ec3f153f3ff9c2e091bd1a4cc88e84365d21da96b2f0bdfe8d5e10d531a1cee73640f22ba46e9531070e5e4a5dbcef8
-
SSDEEP
98304:jDIBn68FVdPQ7hx66pX4HkWBjHegtSYN4Sh0SsTw5qr1BhZdUmY4guJxu4AF76hc:IDypq7zSYN4C0
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a788566a61e73cf374dfa51e567195a0N.exe"C:\Users\Admin\AppData\Local\Temp\a788566a61e73cf374dfa51e567195a0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx