Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
28-09-2024 03:41
General
-
Target
69d19228418f1ca13e8ca87adc58517413d30d75eed822d8075d72672e0551c9N.exe
-
Size
321KB
-
MD5
b36f7d5c8f0c7bb2ea85b6481ced0ac0
-
SHA1
3d78e6d27ad43100383d28896cb714395826438b
-
SHA256
69d19228418f1ca13e8ca87adc58517413d30d75eed822d8075d72672e0551c9
-
SHA512
747196ad92e0eebbb08ad833f5d4648168ca29481de8988ccb933c36f77ec7b70c7e8c3d3451d051d75fd8dfb03ec6659533b008f4f7644beae5967fdf70f936
-
SSDEEP
3072:xfKPw/6Nb8lJtYpDzo83H6JrgboTlyMvXOqms0itTBf28VPy:9KP9NCJt8zErgsTlXvXBmJitTBe8VK
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 18 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\69d19228418f1ca13e8ca87adc58517413d30d75eed822d8075d72672e0551c9N.exe"C:\Users\Admin\AppData\Local\Temp\69d19228418f1ca13e8ca87adc58517413d30d75eed822d8075d72672e0551c9N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses