Analysis
-
max time kernel
10s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25/09/2024, 17:03
General
-
Target
$COMMONFILES/PPLiveNetwork/$OUTDIR/PPAP.exe
-
Size
431KB
-
MD5
163ac23e283a176ac84a7a30dc76b434
-
SHA1
831da55f4914c1589ceb13e98e86528bb91ecde2
-
SHA256
0ab42719c3573db6d5a4a52fe44cd5028ab1d106775786ee8e8a3b7ec063eb6d
-
SHA512
14b20044916410075d3fa16c4688421b0b61398abe34c3a842edef8259917cb0c0b967a1f3658467f10bc20787cbd26294b83fc188c4774415d472b42f304f32
-
SSDEEP
12288:PAKsVjG/IJIIIIImIIIIIIIIcIIIIIIiIIIIIIv7IIIIInH6wNd+xG3cv1DSrxpK:PAKsVjG/IJIIIIImIIIIIIIIcIIIIIIi
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$COMMONFILES\PPLiveNetwork\$OUTDIR\PPAP.exe"C:\Users\Admin\AppData\Local\Temp\$COMMONFILES\PPLiveNetwork\$OUTDIR\PPAP.exe"1⤵
- System Location Discovery: System Language Discovery