Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29-09-2024 13:27
General
-
Target
8BallPool.exe
-
Size
68KB
-
MD5
b07cb639d14b309f9360c2621ff2184a
-
SHA1
fe96fc6920803a21b37c3b12efb5a78200d09a95
-
SHA256
7b817f7f8642af438982b643b0165f575a6dae5c4aff70bffff6f475ab23f354
-
SHA512
9708d2b6696bb83a94bea4c233ff7199bf12e31a409afaa02fe8b1e64a214d49aefe07aba6a13d562bd5721cdf6a074f52f73112d26f497c8cb7e0f96d578dc6
-
SSDEEP
1536:fTPYhNci/UeBCaYmjplGuOjLH/TPYhNci/UeBCaYmjplGu:fTQjci/8H/TQjci/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8BallPool.exe"C:\Users\Admin\AppData\Local\Temp\8BallPool.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
96KB
-
Filesize
6.9MB
-
Filesize
6.9MB