Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 11:02
General
-
Target
f08abd9ef9ced896b33e6868948a9b3723c7094e233bf97bc2c70591aa59793c.exe
-
Size
9.9MB
-
MD5
ff275e3552c974e02dc2878cda78175c
-
SHA1
fb966fa80d6d9e5436bf98ab2597c41ff57368db
-
SHA256
f08abd9ef9ced896b33e6868948a9b3723c7094e233bf97bc2c70591aa59793c
-
SHA512
72a27ea302eac6868b0c6cede3d60eba4369692a6ef2ac3c10f880cb9e2aaf633aa2bfcf5ea30afd99f2a116ec5f0a75c3620787df1b87a4e281140bdcf48fad
-
SSDEEP
196608:bAUTTPHuK+WN8fiFYt78G39ni595E+ePjTDU5Nj6enHrbE4n9FAAWq:bfPb+mFog+5nDPjkrrb7n9FAAd
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f08abd9ef9ced896b33e6868948a9b3723c7094e233bf97bc2c70591aa59793c.exe"C:\Users\Admin\AppData\Local\Temp\f08abd9ef9ced896b33e6868948a9b3723c7094e233bf97bc2c70591aa59793c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses