Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
31-08-2024 20:17
General
-
Target
eicar_zip.exe
-
Size
248KB
-
MD5
e7ffe98621fe9a676fb0b045d8d6f2bb
-
SHA1
bb950f780777dcc1bc7c1476fad70ca9d5ed6cc2
-
SHA256
6fb13d2e1d39ca9944ef05a2d188539b5645f6a23a07b6e3435d69d5b6326ed0
-
SHA512
3c34b47a0c51c9bf235fd6e01cf119e82d965c7e1bd27d6f8ebd245e799fad4cccb19b37fe936fc7ea341417911b639c0c058c8762db01514752b5e1b9dc91ee
-
SSDEEP
3072:r7EtxJmVvXnydoe37w6D/riTVFS6jHDUyb5s5/ouYJhuGGdoZIHGjUjhQR8+tGHN:aMVvXALwo+TVPHJb+5/27PjUX+tG2ZIT
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eicar_zip.exe"C:\Users\Admin\AppData\Local\Temp\eicar_zip.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx