Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
-
submitted
13/09/2024, 19:45
General
-
Target
c7b31c0caf1a5dbce44a61fcc32b4be0N.exe
-
Size
3.1MB
-
MD5
c7b31c0caf1a5dbce44a61fcc32b4be0
-
SHA1
c7fd89df9495084800ef44017f0240790094686b
-
SHA256
8bcb50ca17fcf2a3db7c18de4ef324a0efb04859afe8711cfe7a931f61a05711
-
SHA512
e94228a4dce7126a19c973e7ffbb7c533b918afe5332b908403a4a1dad7ea18e92a245dc362b8212e832ca9f5d5b80f2c44ebb325345c746dfd690efd7b15bf7
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ64:pCKVEE88c2rIKWe9wx
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 11 IoCs
-
Suspicious use of SendNotifyMessage 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c7b31c0caf1a5dbce44a61fcc32b4be0N.exe"C:\Users\Admin\AppData\Local\Temp\c7b31c0caf1a5dbce44a61fcc32b4be0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage