Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14/10/2024, 01:37
General
-
Target
a8bbed425a184bdb7f55158a66e57f99b39e5d6c61055fe857b1a548717c4724N.exe
-
Size
1.1MB
-
MD5
633a26a8ad19f47c4f4003a6257d3780
-
SHA1
e754793d47865f78563aa362e82dd10dd6ea8bfb
-
SHA256
a8bbed425a184bdb7f55158a66e57f99b39e5d6c61055fe857b1a548717c4724
-
SHA512
a62a4c286b2d59275c6e0b1efc5814f419aad2170f97071cb23c703f92e9d3a57da655a558267226a966d2f4d3bd359f5d148913f5d69b00e8a85d9ee41d1dca
-
SSDEEP
6144:oTJFBDQuZhSlXkfbjUl9oGvSWlL24atTBJS:oTJ4uul0TjACeSP4atT
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 18 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8bbed425a184bdb7f55158a66e57f99b39e5d6c61055fe857b1a548717c4724N.exe"C:\Users\Admin\AppData\Local\Temp\a8bbed425a184bdb7f55158a66e57f99b39e5d6c61055fe857b1a548717c4724N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses