Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09/10/2024, 17:09
General
-
Target
935359e26856e76ed138315d8e17626f66283120ddf89df08cf1f40b31ff280f.exe
-
Size
4.0MB
-
MD5
b8dc6cc58d530ed6490cd2560482c075
-
SHA1
c21ae9ce0030a9a4e40b93cecd65328f55e189b5
-
SHA256
935359e26856e76ed138315d8e17626f66283120ddf89df08cf1f40b31ff280f
-
SHA512
7cb0712c0f82f92c17f0e8a2f36df6a6a4da5db9682f1f54d73522761d8cdeb2e3c57f2dae5cf31649478052f34892fd9a13d6bfb196484cdd77e1d24b25bf62
-
SSDEEP
98304:VjqcAvPCdx495Tc5u8ZeILALlfgpLDGg8hhVaokPI3g:VbAyx4auSDLAxgJDGgro53g
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\935359e26856e76ed138315d8e17626f66283120ddf89df08cf1f40b31ff280f.exe"C:\Users\Admin\AppData\Local\Temp\935359e26856e76ed138315d8e17626f66283120ddf89df08cf1f40b31ff280f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow