Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/08/2024, 02:10
General
-
Target
b3eb0a88759bf4eacb1f04536af614989468e2bc5d8f27f7617582cf42f12380.exe
-
Size
919KB
-
MD5
14e43753cd1483a695589acd0254a4a9
-
SHA1
8cbed6043fce4fa0bfb256d8c0018cc971b2004c
-
SHA256
b3eb0a88759bf4eacb1f04536af614989468e2bc5d8f27f7617582cf42f12380
-
SHA512
e31edb97d00fd59c00087e8389dc2f58d975a9fad2da2f53bc37796103477945b20cc1aee1a1ec600c1c953d5f62769f0d64df68d5f55efcde490ed38ba8de05
-
SSDEEP
24576:H4lavt0LkLL9IMixoEgeafzdDc28rw5q9MmCS:ikwkn9IMHeap38rcaPCS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 6 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b3eb0a88759bf4eacb1f04536af614989468e2bc5d8f27f7617582cf42f12380.exe"C:\Users\Admin\AppData\Local\Temp\b3eb0a88759bf4eacb1f04536af614989468e2bc5d8f27f7617582cf42f12380.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage