Analysis
-
max time kernel
94s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 14:30
General
-
Target
a7ac86378482a95dbc584c21198acb626ad419dbf3f81a0a7378535b30dc1cb0.exe
-
Size
2.2MB
-
MD5
a04bfd4c5fa60c9aa9d36d6eba639491
-
SHA1
acfa614c39497b9e19cebc16d3dcf1f16df69314
-
SHA256
a7ac86378482a95dbc584c21198acb626ad419dbf3f81a0a7378535b30dc1cb0
-
SHA512
1a202856757460962ff6362c39d9e15df9bc71ce1caffc9228dfeca92b74d45ce9ef7db8a87aabdbe28613b0578c6ff3a2b238b94ae94a91c7487b0edb66ee62
-
SSDEEP
49152:XbjxcUeggVfbZEo4GtV7wFuiGwtHF3QCM8fIcu5wu17F+5B7ZLyd4S6:nx6gabZEo4wNihP3Qj8fI55wu1c5B7Zv
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7ac86378482a95dbc584c21198acb626ad419dbf3f81a0a7378535b30dc1cb0.exe"C:\Users\Admin\AppData\Local\Temp\a7ac86378482a95dbc584c21198acb626ad419dbf3f81a0a7378535b30dc1cb0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses