Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
21-08-2024 01:30
General
-
Target
dc/4.exe
-
Size
1.9MB
-
MD5
8ec6258190b2bde9fa229cc0f2cc847a
-
SHA1
5a7ae09d4725fcba71a423d877d12a2977798119
-
SHA256
682f31b0bbe6f30fb67f5e07d6579241307694116a2cce4397e6a995bc5c8529
-
SHA512
b9c6508bfc82097cbf87d6d829bbe395fd2172d21cd92dae11de7b60b6b0f09c17f307301cf02ccd4240403386899d9ff078b05b6b8cd0ad8a4e7fa927680114
-
SSDEEP
24576:2TbBv5rUyXVP9R4x0iGsLP+m2/4lydP1ziQ3pmTQMX3pzJJ9djnpbNQDsE2+iIlU:IBJPAcWGoQ35kDJ9ye+iIlYiCn
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc\4.exe"C:\Users\Admin\AppData\Local\Temp\dc\4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam