Analysis
-
max time kernel
136s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02-11-2024 13:47
General
-
Target
Word/RManFUSClient.exe
-
Size
2.5MB
-
MD5
eab8cb5fef7a716886ae19877c80d52e
-
SHA1
6cef2260d2fb047c69ab2afa1a9f5d8c75715f4b
-
SHA256
8f167e5ba3536b6bb20de8168709a469c9d440e6ce9ad80915479a20e8bd53fb
-
SHA512
e4b2734c8b811ac1035e24d8a336e58726b3ffe984aa13fbcfe703716f8ccf1ca798a08850951934e7d98c14ec201a4abf12a7248789f744423ca7860ddb2d3e
-
SSDEEP
49152:mOjOHAqSdSQfZZck2c6pgcqYOHNTBLupHc+w:upOT
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Word\RManFUSClient.exe"C:\Users\Admin\AppData\Local\Temp\Word\RManFUSClient.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.1MB