Analysis
-
max time kernel
95s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14-09-2024 16:43
General
-
Target
b9a8db6cc2bf0ac6134bd531f987a24008eb5f6cf1dd86dc9b4ca0eb8378cc22.exe
-
Size
4.8MB
-
MD5
4852ea5094e426b62aba5995850a0a7a
-
SHA1
9f1c25fa77b35c3f942105c0bb512fff34f70d88
-
SHA256
b9a8db6cc2bf0ac6134bd531f987a24008eb5f6cf1dd86dc9b4ca0eb8378cc22
-
SHA512
6b665d3eb71e5db37feaed290e08a023eb2eeac8ee0afe361fd4c04355a28452131f2d3ffe0accabc529d2627c523ace6636d1b8e945fdaa3b9604258d156e54
-
SSDEEP
98304:vgwqt5FqsPmmRRVfzzby+Wm04/Mq7hNgjJF8Ir4I3QXWDhw3p:vgXFqWp/fzz++h04/MuNgVJ3QOm
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9a8db6cc2bf0ac6134bd531f987a24008eb5f6cf1dd86dc9b4ca0eb8378cc22.exe"C:\Users\Admin\AppData\Local\Temp\b9a8db6cc2bf0ac6134bd531f987a24008eb5f6cf1dd86dc9b4ca0eb8378cc22.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx