Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
18-09-2024 10:23
General
-
Target
1df6c4b9c6fa255e49ff2af6e8139d458dbe3f9c0cd72925ed9366f7a92831a9N.exe
-
Size
430KB
-
MD5
0add47137ddd66a552bbca17e7cdf520
-
SHA1
f124dca53dc392fefe06910666e59721faf19b89
-
SHA256
1df6c4b9c6fa255e49ff2af6e8139d458dbe3f9c0cd72925ed9366f7a92831a9
-
SHA512
74696a5024c72bcabdcfb91c4cfb718ba4cd0f88a09762416ece4ba02b54b8e370ae11a5da44fab8a4b2b80a7d4bc0ffb27c8c455ec2a21f136710bdd6d19e6e
-
SSDEEP
6144:tvRscHtVzjwIRFzJZ2p26+jFWXYnj9iT2ebvXmUcCqkmAO2djXH7icDx3:tvRs4OIm2hWX4U2ebvRUAd7773
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1df6c4b9c6fa255e49ff2af6e8139d458dbe3f9c0cd72925ed9366f7a92831a9N.exe"C:\Users\Admin\AppData\Local\Temp\1df6c4b9c6fa255e49ff2af6e8139d458dbe3f9c0cd72925ed9366f7a92831a9N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage