Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23/08/2024, 00:11
General
-
Target
78e952301dd92ea1dc446c6747aec8eb51022d283ef5787505fa79a7ed768c77.exe
-
Size
2.1MB
-
MD5
1a390b4776610815267a2a8acfa94992
-
SHA1
7b2afd0774a3bcb1c54508c40904df8e96ae4884
-
SHA256
78e952301dd92ea1dc446c6747aec8eb51022d283ef5787505fa79a7ed768c77
-
SHA512
fd3b97e38eaa4947fc41e98b1ac663a621e3ab2aa268500d4f033e42862dbd2d5b8c317191192897a9adebc51962ef440f048d03fe3940aa262b6401fbbba974
-
SSDEEP
49152:D6oEoCFCZncSQgm9+j0Kw+GO/itb3EwxzsdaDOKME9sA0xHF:D6oSFCZncSU+QK7HcFxodJBx
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78e952301dd92ea1dc446c6747aec8eb51022d283ef5787505fa79a7ed768c77.exe"C:\Users\Admin\AppData\Local\Temp\78e952301dd92ea1dc446c6747aec8eb51022d283ef5787505fa79a7ed768c77.exe"1⤵
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses