Analysis
-
max time kernel
130s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29-08-2024 01:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Sena.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
300 seconds
General
-
Target
Sena.exe
-
Size
1.0MB
-
MD5
9872c633ef83d043cfca1609c7668719
-
SHA1
116579be25c526f3fb21620263467717e52db237
-
SHA256
553cfbf1aec44f3baf003f3a095e9638d4c3ec4aa387e07cf64ff69601353306
-
SHA512
93bc495d230f8198e573275c037db8b3487ef8cf1ae7029a01998018f4694e2a793bc9bc73e776e171870f0ac1ebbaf3a917ec8da5be235586569989dd0be0e1
-
SSDEEP
24576:/EoScovLgGCJv+gy4xwpdvGzk+kKufpF:/UcoDTCBtxCdeQ+
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Sena.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe 5064 Sena.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5064 Sena.exe