Analysis
-
max time kernel
95s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-10-2024 18:18
General
-
Target
00032556.exe
-
Size
331KB
-
MD5
1aae133f77bf440c4b239a6f3c1cb1ce
-
SHA1
e779a28e2f49c8ba8bea525e2410e6995ed12105
-
SHA256
5efbc673a8a104eac38e4eccde09ae5ab6ca961860b472b718ef8609c5d3f6f9
-
SHA512
28bd99339a5b5cd8908ade55a333753c5ed1b92bdf10c98833a514a339410b034cc1ba9b8e7f84fa57ea8a9436544f264a8f805d0594a0a832895600b47abad1
-
SSDEEP
3072:XkJu2s2qVXhWKxOROfzRhqMt2VkNKmK6bH2i+QGQJC+9so+i5c0N/UJa:XOu4WXkK4stsIakI6L2idrD9erOwa
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\00032556.exe"C:\Users\Admin\AppData\Local\Temp\00032556.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of FindShellTrayWindow