Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
22/08/2024, 08:01
General
-
Target
276.exe
-
Size
2.5MB
-
MD5
0fdd97a4c16be9d79e52603a14de9203
-
SHA1
612264e621dbf294ab4ad9e9a060530c038c6e5d
-
SHA256
5f670a6ebe6fc5811d3955bac7acdba6a8374bc0f95b092b84296754be54011c
-
SHA512
482d63e01aac342a0d23d3d4f7679d3f82769cfae54f2790a355bee516793e34003a68082eff18349a18a06a423f9bbe4b8360c3dad2c28edd7a9fba2e187aa9
-
SSDEEP
49152:wl+h+1qs0Y/BTmhuGjHnevlnw6WFXSp41:wlK+19VsrjHnepbW841
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\276.exe"C:\Users\Admin\AppData\Local\Temp\276.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.2MB