Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 05:00
General
-
Target
9a2dc7b9406d7336b4a527bb1692424b2ff809d14cb94296102e105cb33472fb.exe
-
Size
2.0MB
-
MD5
657cdd693da83de4e4ad8e7a69a8e7ba
-
SHA1
a5c683041ee633a75c78bde0ca478723b78ebd92
-
SHA256
9a2dc7b9406d7336b4a527bb1692424b2ff809d14cb94296102e105cb33472fb
-
SHA512
c4379f7478030e9ad2228379a5d13f47f7c04d3484c2811432aec35708765c01172281bfb1ad2df39674165e42d50771f97773adebedbe8a1a1e5e8d46b576ef
-
SSDEEP
49152:ybjxWekcP+l6H21UqUrLUq9KlVbMBpc/TludhqcYz/gurIL2:cxRWlY21MIqeKzcBWqD/g
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a2dc7b9406d7336b4a527bb1692424b2ff809d14cb94296102e105cb33472fb.exe"C:\Users\Admin\AppData\Local\Temp\9a2dc7b9406d7336b4a527bb1692424b2ff809d14cb94296102e105cb33472fb.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses