Analysis
-
max time kernel
133s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-08-2024 06:28
General
-
Target
$SYSDIR/PassGuardX64ForYBXY/passguardwin7ins.exe
-
Size
176KB
-
MD5
feeebfd24b6e6b490dae219d0db511ac
-
SHA1
851be598f328916c72efdc01e97908d3717bc24c
-
SHA256
2cff7d0b83c051a4677d9313976aaefc328c53c6851ab30a1524221ef571acd2
-
SHA512
28d3099930f4073bf40c301109a0494767a2eb4fd2d09d6e729a82f41e0ce63edac65d69b5047120490b5598907db19d21a182736dc793b0e193b64e5b4d0532
-
SSDEEP
3072:V3Gmsh8wZitP7uTpj6h/cTU6uD+OUicVTMBzGxKzmqktXbhaczc:Imsh80zp2h/cT5u31oIBzGxKzmq2XbK
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$SYSDIR\PassGuardX64ForYBXY\passguardwin7ins.exe"C:\Users\Admin\AppData\Local\Temp\$SYSDIR\PassGuardX64ForYBXY\passguardwin7ins.exe"1⤵
- System Location Discovery: System Language Discovery