Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 07:08
General
-
Target
57cbd4671bc628d3f6f025ddef8b50983cfdc1d80bffdebe6d1709676f6bd308.exe
-
Size
12.4MB
-
MD5
9e3e2e6db27e5090934a1f5ef76837d3
-
SHA1
5f9636db0a14a22b0b050742aa2a14571b122223
-
SHA256
57cbd4671bc628d3f6f025ddef8b50983cfdc1d80bffdebe6d1709676f6bd308
-
SHA512
f71b67101074e4c7ece409585c3fbe3ea1974938094714e0b26ebf0e0384876333a1549f3d0690b5403de07d39f5bd885d63c823835f4627638a477c70d2e5fb
-
SSDEEP
196608:JNtwKM7/bOCzLwxuuptT0skIRJ4wE2r94KpInNqe4y1pInNq:bKKM7TOCvbcThkIRWwE2r6KWqe4y1Wq
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\57cbd4671bc628d3f6f025ddef8b50983cfdc1d80bffdebe6d1709676f6bd308.exe"C:\Users\Admin\AppData\Local\Temp\57cbd4671bc628d3f6f025ddef8b50983cfdc1d80bffdebe6d1709676f6bd308.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx