Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20/11/2024, 04:56
General
-
Target
e498822b4503e11c38b3711e3d641e6ee5cc3eeb58ff40a410bb8e7683c47cd8.exe
-
Size
3.2MB
-
MD5
6d9dedc153d29d0d2a210e8dc75fdb76
-
SHA1
ecaedf54a710abca5465884becfdbdc7f8f2121f
-
SHA256
e498822b4503e11c38b3711e3d641e6ee5cc3eeb58ff40a410bb8e7683c47cd8
-
SHA512
37069ff0c151276eb6817438e17d14ff60bceb92f610828e38b3c42ea1ada4e1ac0884a8b2f17746bff7c7d6728c59404f9cf99514e01a92cb746d08cb54da6b
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ6s:pCKVEE88c2rIKWe9wv
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e498822b4503e11c38b3711e3d641e6ee5cc3eeb58ff40a410bb8e7683c47cd8.exe"C:\Users\Admin\AppData\Local\Temp\e498822b4503e11c38b3711e3d641e6ee5cc3eeb58ff40a410bb8e7683c47cd8.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage