Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
03-09-2024 12:09
General
-
Target
NPFInstall.exe
-
Size
251KB
-
MD5
23af43847b2c8529ec7171d4a378e001
-
SHA1
06f1e0aeec9043bff7032bd4a79d0c4f0c33ceba
-
SHA256
5b1a62010bc7f9a58721d067919d6cedb0e8e414261e729e202e79334a791492
-
SHA512
2fb8117943c752956b4520e465766252e21d114c722d324fdd6f8e54e35871af765f910fec2c323dd1ac89e5dbe45b04ed72c090876ab1c3ba072b5ec305eddd
-
SSDEEP
3072:oeAvCTO25maSEPJJ1SxLtfJ5OGydgzwpXzcbU0ZFoecBkB3K9GyNyOLbTOa1sf3g:oTCS+bM3MEU0Tjcb9rNyhrN/2
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\NPFInstall.exe"C:\Users\Admin\AppData\Local\Temp\NPFInstall.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery