Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20/11/2024, 04:51
General
-
Target
e2a51eae8c6de79696f7b0f8a1dd00a3883f1dc1fc757521bfcc36f313fbb99e.exe
-
Size
389KB
-
MD5
75d102feb15bd1772f727153624162f6
-
SHA1
a3d6d80a67329a1f6766166928c05c945e42a6b5
-
SHA256
e2a51eae8c6de79696f7b0f8a1dd00a3883f1dc1fc757521bfcc36f313fbb99e
-
SHA512
bb8cc1b2cd1ed8cb1da6579cba83d945ebba8c2c0171d69a837335b66329e8fd6cb5aa6fe7dc3492d16436fe888468702711e0552abd4306a74e9aa7bf283495
-
SSDEEP
12288:Cf5szpTFQX0RtV/gUlbfHIWGn2/x/LrxYB8p+tyWWts:qszxFiiLIifHm2/x/LrxYB8KLF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2a51eae8c6de79696f7b0f8a1dd00a3883f1dc1fc757521bfcc36f313fbb99e.exe"C:\Users\Admin\AppData\Local\Temp\e2a51eae8c6de79696f7b0f8a1dd00a3883f1dc1fc757521bfcc36f313fbb99e.exe"1⤵
- System Location Discovery: System Language Discovery