Analysis
-
max time kernel
132s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-08-2024 20:10
General
-
Target
28eaeab6f9eebc2c489a0ccbb29dafd9429e9eaffd20de72c55c7750bd231cda.exe
-
Size
235KB
-
MD5
8e9f336a736075985c4cde7a2ffc6202
-
SHA1
ce2f10f0e18c2ed3a709ab97e726ddd0867adce7
-
SHA256
28eaeab6f9eebc2c489a0ccbb29dafd9429e9eaffd20de72c55c7750bd231cda
-
SHA512
87863dca993bee2b4168b1030f55d0a4debfff574feaaeb7eba0ce40b37ffd93d9ec4366b9fd964b5352a34fb871fd41818f85bfaf1238cd648f1b8b7dc4401a
-
SSDEEP
3072:9gXdZt9P6D3XJz45ldNkY/+9E8h36ypmsGRfoqfiXEV2rnp8Dy:9e34R2dNk9zh36dqXEV2rnCm
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\28eaeab6f9eebc2c489a0ccbb29dafd9429e9eaffd20de72c55c7750bd231cda.exe"C:\Users\Admin\AppData\Local\Temp\28eaeab6f9eebc2c489a0ccbb29dafd9429e9eaffd20de72c55c7750bd231cda.exe"1⤵
- System Location Discovery: System Language Discovery