Analysis
-
max time kernel
92s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 14:11
General
-
Target
76442f00ee54ca6652b4a1e4e644500db4de2dce5375a626e6404f9ad1cb7e58.exe
-
Size
268KB
-
MD5
c1776427ff93ce80ca568f614b377810
-
SHA1
dc6b04d9f997f7d37b01e470e2e35bf3987f3b48
-
SHA256
76442f00ee54ca6652b4a1e4e644500db4de2dce5375a626e6404f9ad1cb7e58
-
SHA512
98c260915296b3fa5277929755eaaff22f09cb412272ce04b255ac20387498c8c543e50412c1741ba79246380d3dc01eec924bb2835430330346918d6bcc076f
-
SSDEEP
3072:VU/og5epPkbkSmEYeydYkldjfjw2J21713MHDeM8BcEeP6BhCl9uQnHDHwab3b5:VUn5epcAyYe6YWjfj5cRFcXPshC3uYH
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\76442f00ee54ca6652b4a1e4e644500db4de2dce5375a626e6404f9ad1cb7e58.exe"C:\Users\Admin\AppData\Local\Temp\76442f00ee54ca6652b4a1e4e644500db4de2dce5375a626e6404f9ad1cb7e58.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx