Analysis
-
max time kernel
92s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 06:46
General
-
Target
file.exe
-
Size
900KB
-
MD5
ff55ee0e99c5f1906e2695aa226a4eeb
-
SHA1
6bdd2886a6465cfd05503f2fb6490d90da978a9f
-
SHA256
71beefcdf3cd912bf1faf0052e83f3c527339d8ec0a793b00c83c738035851ca
-
SHA512
c73e86740d73d6623935737e964e77bfe5542fc34f450b1f48492d7f9b418dfb8ec89fecf47e849f3441b01da12834544d4f7a83ff3030066ea1e9f269a12a89
-
SSDEEP
12288:gqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgajT8:gqDEvCTbMWu7rQYlBQcBiT6rprG8a38
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage