Analysis
-
max time kernel
94s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-09-2024 21:05
General
-
Target
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7.exe
-
Size
15.3MB
-
MD5
d1e2a32c4008f45250527ed4f213a614
-
SHA1
5e707332a9f3551fb843e8c68143ea06830ef30a
-
SHA256
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7
-
SHA512
a61973751fd3fc33d2cca06de0bcc10ea128ade3ed5e6062ab1cec5b57284551dae27cece48385678d30a40c576b538e546b8ce34ac5326ae148682a858f8444
-
SSDEEP
393216:sbAmMBxns2tBMb90B1vJNizu31jDrNnRUkDgYiHs:dNBJtDB1vJ7l7Nn5DLiH
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7.exe"C:\Users\Admin\AppData\Local\Temp\c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26.9MB
-
Filesize
7.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
26.9MB
-
Filesize
26.9MB
-
Filesize
26.9MB
-
Filesize
7.1MB