Analysis
-
max time kernel
93s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 13:08
General
-
Target
3b0fed27f46baf319528ca8504dbf2fae7b31ae188f9e1ed6b33dd6644644383.exe
-
Size
3.4MB
-
MD5
7e4a97eb088c55ec34effa4ffa79cf39
-
SHA1
8cd057b99fe4f0c731407021a5e663202e34c68a
-
SHA256
3b0fed27f46baf319528ca8504dbf2fae7b31ae188f9e1ed6b33dd6644644383
-
SHA512
36037fdb547a3496f429e0c118beb110cbff54285548ac73b242243e3493ca1b2ba7022dc734f8c829e2096bbfa8a21c17d3ff04e27d329017ed5d62d50e2af3
-
SSDEEP
98304:ExH3Qsy+KIpkP3hU+IGTJ27jYZ6o2JuzRNbz0/q:GAsy+Z1+IGwcZWJqbz0
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b0fed27f46baf319528ca8504dbf2fae7b31ae188f9e1ed6b33dd6644644383.exe"C:\Users\Admin\AppData\Local\Temp\3b0fed27f46baf319528ca8504dbf2fae7b31ae188f9e1ed6b33dd6644644383.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses