Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/09/2024, 02:57
General
-
Target
450b6dd9dc3263b4e6bb012be825d5eb575c480bfa680742f3a395162be7366f.exe
-
Size
8.4MB
-
MD5
e49e03b9ae33eb6f8bd59d7f54dd994f
-
SHA1
58de48a64cecb75270663d31f5133d7b07cf12bc
-
SHA256
450b6dd9dc3263b4e6bb012be825d5eb575c480bfa680742f3a395162be7366f
-
SHA512
afadade33de1fc3a45e6f71c9f24a1dd184080b16963a4bac6deb5b6d888e7dd725167974e050268d213d743f363c7a9b8dc04ed22e307bccea6c41ea41d9df5
-
SSDEEP
98304:IEvZsPdDM+vJ0OME34LzYLcdqm9uALfprsQ6EooKidt5JBAUZLbt:IEyYlEI3CcdVuAdGEHd3JVHt
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\450b6dd9dc3263b4e6bb012be825d5eb575c480bfa680742f3a395162be7366f.exe"C:\Users\Admin\AppData\Local\Temp\450b6dd9dc3263b4e6bb012be825d5eb575c480bfa680742f3a395162be7366f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx