Analysis
-
max time kernel
94s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05/10/2024, 10:56
General
-
Target
$TEMP/instloffer.exe
-
Size
64KB
-
MD5
37c5c2cdf0080e610bf452f8ddeb6144
-
SHA1
75d2dc14bec327c872acead0e1b9ee9f6b13c3c4
-
SHA256
eae712b775752104c94814bbd29276119c1280c7bdd904bb8a7125c31268c1a8
-
SHA512
5f2e06768e6cdc064d6535b90e816ae36d7e5992c8d44296327d2adc47d2e2228919c8ea8fd4ca5158545bf62cfdd5439f8c9508d73d3e024bf8e2518a4e65dd
-
SSDEEP
1536:j2dZEszWriITJGrvopX1VF7CXjl7yb/FsZGXPRSEvrGqEYiUr:jZszWOITsEL50jl7yb9s25SEvrGqEdE
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\instloffer.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\instloffer.exe"1⤵
- System Location Discovery: System Language Discovery