Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
07/09/2024, 13:41
General
-
Target
5f339bf8368bd6bff64d826c05cc7f2ee70dbb8aa374801729f99dbb325b7076.exe
-
Size
4.4MB
-
MD5
5a91db11bef3ddb0489132e41a471d8b
-
SHA1
923556db2c681b9f92d3605d9cb85d824451d65b
-
SHA256
5f339bf8368bd6bff64d826c05cc7f2ee70dbb8aa374801729f99dbb325b7076
-
SHA512
e6654d47fd6e2777c0197da4a2b5d17eca1a262b230820852b03ce18f0a06405175c374d2c11ed38a34d82b1525af357aa97357404193df697bdeacc105e3754
-
SSDEEP
98304:hmUeM0yM1pz8Ok5ViE1HJ0/RiVQaj99h2xUklYMVSSJRaThRK1GP6FWXn6+iYE0r:hny5pzvk5ViE1HJ0/RiVQaj99h2xUkle
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f339bf8368bd6bff64d826c05cc7f2ee70dbb8aa374801729f99dbb325b7076.exe"C:\Users\Admin\AppData\Local\Temp\5f339bf8368bd6bff64d826c05cc7f2ee70dbb8aa374801729f99dbb325b7076.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx