Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07/09/2024, 10:07
General
-
Target
bebdd053a15b1cdf0c3bfdd32e352d40N.exe
-
Size
3.1MB
-
MD5
bebdd053a15b1cdf0c3bfdd32e352d40
-
SHA1
360062934e42e2d21c6bf3a91a545777b15e1d7b
-
SHA256
a0fe91994de3e5f910a10119b50862fb01e68f2dd99d64734dfaf8e2e5eecb9f
-
SHA512
4729e864023f8732a72535329b9ee9091c0566f2a02d41058a3f25b4c662b379c7ddf7e973a38a8e701ed902fb404c3e4173b4fa47267ebbd210a0721a61cd9f
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ67:pCKVEE88c2rIKWe9w8
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 10 IoCs
-
Suspicious use of SendNotifyMessage 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bebdd053a15b1cdf0c3bfdd32e352d40N.exe"C:\Users\Admin\AppData\Local\Temp\bebdd053a15b1cdf0c3bfdd32e352d40N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage