Analysis
-
max time kernel
11s -
max time network
13s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21-09-2024 23:08
General
-
Target
Xattacks.exe
-
Size
8KB
-
MD5
2fdec03ce7fdb4535e239bca08372962
-
SHA1
ddd29bc0392898f3cfe9e3272473e4994c04d472
-
SHA256
c34cba61ad03fcba3e9193e95df772fb5438d2ab137ce6e39d0d850aa2db3cee
-
SHA512
cef9df3f04e564d47230b21698b7406e4c27ac92ec915993ceb425e1a3f56687556c2c1ce1f5372226c4f192047dfc496d15aab1f46e4f4154f2260355f004ed
-
SSDEEP
96:7LP1HOuBhIGCbfBfbmBoEvLNn+95oHN5B9Mb1EBl9S89z3+3qIzwyUyfDgRmjGW1:fPYGLNn+9gN+1Ez8853sqIsmTjZVfmO
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Xattacks.exe"C:\Users\Admin\AppData\Local\Temp\Xattacks.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
7.7MB