Analysis
-
max time kernel
93s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05-09-2024 12:34
General
-
Target
27f91d3d3f4c9e96734319c1b8eec20d97a254ed5e6dd84ada84e7cad3074ca2.exe
-
Size
167KB
-
MD5
10d5be42afb647646ff91ac55583e47e
-
SHA1
877f926a48552bfa50f28392c8bd8b6e10771650
-
SHA256
27f91d3d3f4c9e96734319c1b8eec20d97a254ed5e6dd84ada84e7cad3074ca2
-
SHA512
dee1756f6d82a0fa174b64c8512e561ecab5724c413e8be1177f20058c1b15136cb7da16e2da736d5a1f3fc1ee49656d082e1cccffff5216df8ca8c9d673b5e2
-
SSDEEP
3072:5s77w1OlWCt1uxILTUGmhVdDh7owkjwq7p1MwrRrnWZffoooooooooooodooo9Ot:CmOtK9dDewIv1MwrRrWt
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\27f91d3d3f4c9e96734319c1b8eec20d97a254ed5e6dd84ada84e7cad3074ca2.exe"C:\Users\Admin\AppData\Local\Temp\27f91d3d3f4c9e96734319c1b8eec20d97a254ed5e6dd84ada84e7cad3074ca2.exe"1⤵
- System Location Discovery: System Language Discovery