Analysis
-
max time kernel
150s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
01/09/2024, 01:20
General
-
Target
cf3f2a819c7c08db1e7fe32a1a85dc929d6e2751ce5a206250442b2b246b131f.exe
-
Size
92KB
-
MD5
548f467b892bae9f11df1a44b4b3dcb8
-
SHA1
8839c8cd975950af89eb55e6f117f8ab09fc03e8
-
SHA256
cf3f2a819c7c08db1e7fe32a1a85dc929d6e2751ce5a206250442b2b246b131f
-
SHA512
192c4b312c0f94d6c8c55156944822ccecb90fc0ed3b2920f64fdf2408565a06d01dd4a0fb421734d44d8e29b6a17bdd222d826dccd9a5906cec3ed2b99a0055
-
SSDEEP
1536:7cr9yD3LvFC42lihdel/GeNDZn2C/kSTsuySAKtL/fOSbUZwQ:a9yD7vFR2lyIH8Sguy/4L/fOSuwQ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cf3f2a819c7c08db1e7fe32a1a85dc929d6e2751ce5a206250442b2b246b131f.exe"C:\Users\Admin\AppData\Local\Temp\cf3f2a819c7c08db1e7fe32a1a85dc929d6e2751ce5a206250442b2b246b131f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB