Analysis
-
max time kernel
107s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23-08-2024 21:38
General
-
Target
9be372c0b3301ceee99985db759244f0N.exe
-
Size
562KB
-
MD5
9be372c0b3301ceee99985db759244f0
-
SHA1
356a7e3c4063757620e762ea9f8accfe5f1afddb
-
SHA256
c245bc41156b8f746fc6f87162472571bc6acb521f94f94c2067f3870e2c29e7
-
SHA512
9a4c88061312d54bb8ab5dadd47b4a1542e506398f0f31df5b045204d3a481b731748d792a6ca1d919480662b3c77d3cd84c475e760617cdc71ae7a3e11047df
-
SSDEEP
12288:ZCK+qK4QIUJ6ItO49LpwEBXu+OKex+VwKDPFIihoGqz765OMFI:ZChqKgU79usbkx+VNJhofz765hG
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9be372c0b3301ceee99985db759244f0N.exe"C:\Users\Admin\AppData\Local\Temp\9be372c0b3301ceee99985db759244f0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow