Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
11-11-2024 09:28
General
-
Target
setup_installer/Wed09977fdc12334.exe
-
Size
125KB
-
MD5
6843ec0e740bdad4d0ba1dbe6e3a1610
-
SHA1
9666f20f23ecd7b0f90e057c602cc4413a52d5a3
-
SHA256
4bb1e9ad4974b57a1364463ca28935d024a217791069dd88bedccca5eaad271a
-
SHA512
112a327b9e5f2c049177b2f237f5672e12b438e6d620411c7c50d945a8a3d96ec293d85a50392f62651cdf04a9f68d13d542b1626fb81b768eb342077409d6d3
-
SSDEEP
3072:opLxpeJYmCJZ/QXhdH4QzzMx0JwqFsM76bNbcOvuMaDw4e7dA/rhfL9tG:qeW0hl5zwzM7ROvuMaHJt
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup_installer\Wed09977fdc12334.exe"C:\Users\Admin\AppData\Local\Temp\setup_installer\Wed09977fdc12334.exe"1⤵
- System Location Discovery: System Language Discovery