Analysis
-
max time kernel
1359s -
max time network
1421s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
26-10-2024 22:43
General
-
Target
StarsHero.exe
-
Size
3.2MB
-
MD5
d4d0a5a330d40fbfa9ac9ef3bda704c9
-
SHA1
1822302a9655585afdb820afde271ed6ab64791c
-
SHA256
98c268b55ecfe3b0dd8496f973e181e567bcfa5f92762bffe8e47039cfe232ea
-
SHA512
ad9a9810c0d044aef36a00704974fe9f261b7d66eef40f0494817ab50644198ae32fcd436318bcd514ed831e31645cf04b1ea2749b456ab10e868effc4d37b80
-
SSDEEP
49152:XVUlMxh3KbgsF2ljgJcvTdqrVPLiRfYMNqusjmj3YXYUAgg+b9ub9AC5JJ9:X2l0hlsERv0J+fYMNOY2Yf+SeC5JJ9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\StarsHero.exe"C:\Users\Admin\AppData\Local\Temp\StarsHero.exe"1⤵
- System Location Discovery: System Language Discovery