Analysis

  • max time kernel
    96s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-09-2024 07:04

General

  • Target

    79b6166db488c29e5fea900091c6c4b2c0493d5d8553b018c8008c900016e1ad.exe

  • Size

    2.5MB

  • MD5

    d63ec4d1224dc7ba530ab283cb8a06e6

  • SHA1

    5c2fc0d9b37cfc789f9b039e99bb7c3ba35474c5

  • SHA256

    79b6166db488c29e5fea900091c6c4b2c0493d5d8553b018c8008c900016e1ad

  • SHA512

    a0c5543aef188936f0a7247a3cc032608951c6e30c4ba015e4112e1194e8d32b4435fcb587f530714be3f6719f94f78bb12120ca0e8b93fafc104e8316a37fb9

  • SSDEEP

    49152:iAFUta8fDSjVjSZmL/2jvjqabbTn8nLz3JCJDmq:bOK4mL/ejdn8nLrJmqq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\79b6166db488c29e5fea900091c6c4b2c0493d5d8553b018c8008c900016e1ad.exe
    "C:\Users\Admin\AppData\Local\Temp\79b6166db488c29e5fea900091c6c4b2c0493d5d8553b018c8008c900016e1ad.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads