Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 09:30
General
-
Target
4c68e24cea0727c3bb451572249af5a681d61f5dd13deccdeac03b6f18bf491fN.exe
-
Size
3.1MB
-
MD5
c757bebd3f12e5be98558ce5aaeb4e10
-
SHA1
b6674c0ed2d65be8a8c5516697c0dada0db1377f
-
SHA256
4c68e24cea0727c3bb451572249af5a681d61f5dd13deccdeac03b6f18bf491f
-
SHA512
7aa9ff60e22ba4b893e362ad5423a26fc838ac496df254da440d4ea6039fdd7150f979b2d1add01082ba47c9c7e51e5222ad578ee88025305b900983e75954b6
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ6O:pCKVEE88c2rIKWe9w5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4c68e24cea0727c3bb451572249af5a681d61f5dd13deccdeac03b6f18bf491fN.exe"C:\Users\Admin\AppData\Local\Temp\4c68e24cea0727c3bb451572249af5a681d61f5dd13deccdeac03b6f18bf491fN.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage