Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05/09/2024, 13:46
General
-
Target
89518b113130b0ee299ee96d3fc861b0N.exe
-
Size
3.1MB
-
MD5
89518b113130b0ee299ee96d3fc861b0
-
SHA1
075ba707567032dceef3b45d146501bd2982b68e
-
SHA256
c4c0039a62061e9ed5f37f0f49a0bd77c5c72a9a536d76ba45a059b2ff74c0ba
-
SHA512
7c2d48f7608f520f566a1746002fd2065f7f434b334ce72603cf6d9810f8f36f98b887b08157b943002cb378ca55069b5d206689245f6cd727669de802d1d37e
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ6b:pCKVEE88c2rIKWe9wG
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89518b113130b0ee299ee96d3fc861b0N.exe"C:\Users\Admin\AppData\Local\Temp\89518b113130b0ee299ee96d3fc861b0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage