Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 19:02
General
-
Target
0f461d3c74039bdd5f1f8263e0dd1ac78ffc37770de3bf98ce505cbb701f1432.exe
-
Size
1.5MB
-
MD5
768d85100db53165468666c19f12fbca
-
SHA1
9b4d94dd03e693557fec0a489a0205e3b7a3ba81
-
SHA256
0f461d3c74039bdd5f1f8263e0dd1ac78ffc37770de3bf98ce505cbb701f1432
-
SHA512
f7e1b696976cb2d809ae997bc5ef4cef3c2b40e239d1c80befac3652aa079a8d0bdd24fbf058d960acfee1fc07034f0ac694c69b30ba5cb42ee3f0461573eeab
-
SSDEEP
24576:kbjxvP7aPzWl5k7yf9klbznXgIIin0SaKMX19P9vAwxQ9BvlxWzU6NuBxsCVOV/:kbjxX+ilBWlPXIwrS/1YwyB6zVNKxzE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f461d3c74039bdd5f1f8263e0dd1ac78ffc37770de3bf98ce505cbb701f1432.exe"C:\Users\Admin\AppData\Local\Temp\0f461d3c74039bdd5f1f8263e0dd1ac78ffc37770de3bf98ce505cbb701f1432.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses