Analysis
-
max time kernel
93s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 14:01
General
-
Target
94ae33e6982d8ac1e90bc932373a0096d23d6e7dc9bc98fe036ec9f028190495.exe
-
Size
2.0MB
-
MD5
a7c560c037785aecd4212a7e951b0cfe
-
SHA1
643e039923a12de6cb57a9d7c2d5fa95d175ad52
-
SHA256
94ae33e6982d8ac1e90bc932373a0096d23d6e7dc9bc98fe036ec9f028190495
-
SHA512
db32c4a08267746d5937a34fb53b0a2bbd3d07a46a5964d23aa96869fc89a9aba06e110cfce4792656bb1c9a04a48eef4cbd8ae31cd670dc735ec60a8601598e
-
SSDEEP
49152:FbjxOkVtvQA0sqZWRjA3JD5RyU1LJOccoEzImlDY5FAGzlVrNiEWD2MZSR:hx1Vth0sqIRjch7yU5JOc4m5ZVZInQ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\94ae33e6982d8ac1e90bc932373a0096d23d6e7dc9bc98fe036ec9f028190495.exe"C:\Users\Admin\AppData\Local\Temp\94ae33e6982d8ac1e90bc932373a0096d23d6e7dc9bc98fe036ec9f028190495.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses