Analysis
-
max time kernel
140s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
20/08/2024, 07:03
General
-
Target
514.exe
-
Size
2.7MB
-
MD5
395fbd4342b29dfbe05ccc872865d0df
-
SHA1
cf0ed1a4a4b3822386231749793802e4d8a828c0
-
SHA256
5eb696e7bf5b979af757d0ce5bda4b1d276fcb03b26e92b2ae0abcd02becf07d
-
SHA512
f0b6a903249adadc2db083dd493512e4f9bfc12270de473f04bd88631ffe4dd6640315bcbd68039e5ab418f321ff080d0ccd8e70097fa56bdefc6faf68a8cfc2
-
SSDEEP
49152:kl+h+1qs0Y/BTmyuGjHnevTvZVD0/pocjkqApT:klK+19VDrjHnerL0AB
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\514.exe"C:\Users\Admin\AppData\Local\Temp\514.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.2MB