Analysis
-
max time kernel
3s -
max time network
3s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 12:29
General
-
Target
tester.exe
-
Size
707KB
-
MD5
12a0f824a29b55bb77a8c8027b1f76c3
-
SHA1
2beb72a207fc97b778b64bd43ed375b84aca1bdc
-
SHA256
ec13dfa84c48925712d4c5ae4d6af7be9ef41b421ed4a4864b05f23a3bcd0422
-
SHA512
8ac1ff169102b75b65a613760d32e7d1e2a99033319adb6e0f462104933a865f482318787ba84df59b990a35c1843bb2e2a5b30a3212fddf2fed4e84083f1f07
-
SSDEEP
12288:EU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkz:EU+9XNrenyktDLdYNtcdvQNC9wHAP5cj
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tester.exe"C:\Users\Admin\AppData\Local\Temp\tester.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx