Analysis
-
max time kernel
1s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
03/09/2024, 22:23
General
-
Target
Zoom_cm_fikxkex5rZ9vvrZo4_mPTU3Fjhxt7Fz-KulDvjXaNElFAqY6tsvgWZO@wgMsTyzflNc5IrW7_kf44a3a7ea613aaba_.exe
-
Size
135KB
-
MD5
bc48cb98d8f2dacca97a2eb72f4275cb
-
SHA1
cd3dd263fc37c8c7beb1393a654b400f2f531f1c
-
SHA256
c18fb46afa17ad8578d1edd4aa6a89b42f381ca7998a4e5a096643e0f2721c49
-
SHA512
7db6992278ca008e7aafa07eb198b046a125d23ca524f15d5302b137385dd4e40a4a54ce4dabb28710b71fbcfdd2d3315fb36e591edc2b3e1737b11b9ee45a5c
-
SSDEEP
3072:1TGtOioVUSuLwYMdbQro39gSms+rkNgrQ8WZW:peoVU9JMdbQrbvtG
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fikxkex5rZ9vvrZo4_mPTU3Fjhxt7Fz-KulDvjXaNElFAqY6tsvgWZO@wgMsTyzflNc5IrW7_kf44a3a7ea613aaba_.exe"C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fikxkex5rZ9vvrZo4_mPTU3Fjhxt7Fz-KulDvjXaNElFAqY6tsvgWZO@wgMsTyzflNc5IrW7_kf44a3a7ea613aaba_.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fikxkex5rZ9vvrZo4_mPTU3Fjhxt7Fz-KulDvjXaNElFAqY6tsvgWZO@wgMsTyzflNc5IrW7_kf44a3a7ea613aaba_.exe"C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fikxkex5rZ9vvrZo4_mPTU3Fjhxt7Fz-KulDvjXaNElFAqY6tsvgWZO@wgMsTyzflNc5IrW7_kf44a3a7ea613aaba_.exe" /normal.priviledge2⤵
- System Location Discovery: System Language Discovery
-