Analysis
-
max time kernel
111s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 05:31
General
-
Target
1d89743d91fa6685719590e56a08d7e0b6cb8677cb76a5ef38ce59f2facb83cfN.exe
-
Size
15KB
-
MD5
e2430663b3c8f0c57ff20218b3525d40
-
SHA1
b8c9b7d89c761df8048abe9edd0eea15d8d9b9c5
-
SHA256
1d89743d91fa6685719590e56a08d7e0b6cb8677cb76a5ef38ce59f2facb83cf
-
SHA512
ac01b53a5f06cf01829214182ae749a7effa3c034ade9f7e5af49a7b39a9938b2cf87271349d313382163140d5733fd422df1c543d8d23e69d8e546583ddfce3
-
SSDEEP
384:fHGC6BxxbPmNQQv34EZtVwYCv0kE7UatW:vx6BOB3T3BCvtag
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d89743d91fa6685719590e56a08d7e0b6cb8677cb76a5ef38ce59f2facb83cfN.exe"C:\Users\Admin\AppData\Local\Temp\1d89743d91fa6685719590e56a08d7e0b6cb8677cb76a5ef38ce59f2facb83cfN.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB