Analysis
-
max time kernel
91s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-11-2024 13:00
General
-
Target
enumerate_gtu.exe
-
Size
952KB
-
MD5
90bcb9a27ee951a4c14aebfc9e1705e5
-
SHA1
3813d0878b2df1fe54050ea2280252df5bc15969
-
SHA256
ec70c5810a29a6e4039f47d969896a64cbf926682cfa8b7c5da080918575f0a5
-
SHA512
2676fea3be40fedd3aaa67db585f867ada3ff111eb892652d83dfea0404fb0107e3388b651d09ef4cec3c899699e8009ab44a88b4abd33a273728642177f8bce
-
SSDEEP
12288:/5E2jmrKcGv4g60GQM336KavWhSUzUcymV+VAPYL2xIUlL2f:/e2pcGv4wMiWhzIZbadlyf
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\enumerate_gtu.exe"C:\Users\Admin\AppData\Local\Temp\enumerate_gtu.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx