Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 13:47
General
-
Target
2a9b9ae663a9596ed74d26e98d2f84f35a17c5bb3e38105effdd70508d7e652c.exe
-
Size
361KB
-
MD5
30a742e43c717d85ad47c83d19b47eb5
-
SHA1
1f2a27dfb6615b573a92200fc0f9b3cde22f01c0
-
SHA256
2a9b9ae663a9596ed74d26e98d2f84f35a17c5bb3e38105effdd70508d7e652c
-
SHA512
6d380da850a04ea390f7b8fde5868bc8b1916af1ef38a8635915743782d78360254529e13f39e9ae8b7a0229f339f8e94031d52172074768e9d4d2510d706315
-
SSDEEP
6144:srZQGrrS3ZVk2lrjf7wsgH+bp97nopU4mKjLPO8lNc:yrrSJV7wsA+/joG8lNc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a9b9ae663a9596ed74d26e98d2f84f35a17c5bb3e38105effdd70508d7e652c.exe"C:\Users\Admin\AppData\Local\Temp\2a9b9ae663a9596ed74d26e98d2f84f35a17c5bb3e38105effdd70508d7e652c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses