Analysis
-
max time kernel
41s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27/09/2024, 06:43
General
-
Target
ββπ π₯ππππππππ πβ_β β¦β€β€β₯β β’β¨β‘.hta
-
Size
131B
-
MD5
17baffbd242408441747464165389107
-
SHA1
5b77ddda33c4eed4e73ab2b9baffb3cad4d37307
-
SHA256
269bf0c324d58daa2e4f2a0b19a3850fc760030cb11fc60f5b424b212af5c5ed
-
SHA512
b19c70bc5c91a01a8262c27ed4ffbe5b4b5585f879a2a5ea3b8d44e71f6b85e50cc3c984aa84cfbeb6668716426d26fca0f0fa2dc12a4d206ec3374a06b87ab9
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\SysWOW64\mshta.exeC:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\payload.hta"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow