Analysis
-
max time kernel
90s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20/11/2024, 05:31
Static task
static1
Behavioral task
behavioral1
Sample
Adobe Activator.exe
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Adobe Activator.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
-
Target
Adobe Activator.exe
-
Size
11.4MB
-
MD5
7e40794c0c7c4d2522131af8127bbf05
-
SHA1
bbff858181f6a15e4ca03b4a3c5767fbda865054
-
SHA256
f5bc684f562f56ba4680df1e9f76d9213efce47003f8cf191f73daedf28bf137
-
SHA512
1a243c73a9e27e00fc91423558e8ede736998f827da2d3ca175359dcc7482f9d9b93982f9c72dcb5cafc27301474ea7a40f6df9be99cd3c611043ac730601ecc
-
SSDEEP
196608:7QFfefNfo1DE1fe/cYei8sh0e/cYei8/h0e/cYei8J:uzOfJsh0J/h0JJ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Adobe Activator.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2608 Adobe Activator.exe 2608 Adobe Activator.exe