Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-10-2024 14:29
General
-
Target
b1857578b3a4da8e80a84933055a912f7a4b28bc6ed34dbe6a855ca875d473a5N.exe
-
Size
1.3MB
-
MD5
032c01690421f4beaa08ace1ebd7b380
-
SHA1
785ad2c1bc3a1c75d800c87081cdde1ee5ebd302
-
SHA256
b1857578b3a4da8e80a84933055a912f7a4b28bc6ed34dbe6a855ca875d473a5
-
SHA512
c5e6b37ac8ffe214225729414631f9afe93db4c5a6833b5f437dcc0fd376c038e0e8591d2a8c13edbb2b1ecfdca67018deecded7858b6405b85fa6dd5192a7ed
-
SSDEEP
24576:VPT4UloF6t/7lqx+rZ5O2/fApP38QPFDJaZD+TdyuTSmoQMVVMQQwNSJm:VnoF6b9dkm639FDJaZm7d4jfz
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1857578b3a4da8e80a84933055a912f7a4b28bc6ed34dbe6a855ca875d473a5N.exe"C:\Users\Admin\AppData\Local\Temp\b1857578b3a4da8e80a84933055a912f7a4b28bc6ed34dbe6a855ca875d473a5N.exe"1⤵
- System Location Discovery: System Language Discovery