Analysis
-
max time kernel
93s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 07:45
General
-
Target
1a03f5f0fbc9363fc41c95d96022efb3bbcafc784091cb65437f95541c708fa0.exe
-
Size
412KB
-
MD5
155eb12192f1d046e27c6e41596450c6
-
SHA1
700f96908c530a7d4a32d114749e8e044e2f543e
-
SHA256
1a03f5f0fbc9363fc41c95d96022efb3bbcafc784091cb65437f95541c708fa0
-
SHA512
6fe5fd4c1a79df986fca4eaa94860ae88419bef724ee2e40f4607fbe4201d9190c7d9771cd0d4393609441fcaa9ecda893e57824efabf3e831e6b4c380cb280b
-
SSDEEP
12288:YyVJ4ExvbaxG+DunBBe83Gm0OmWbpr3txQ:jbjxvbOunv2mXvDQ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a03f5f0fbc9363fc41c95d96022efb3bbcafc784091cb65437f95541c708fa0.exe"C:\Users\Admin\AppData\Local\Temp\1a03f5f0fbc9363fc41c95d96022efb3bbcafc784091cb65437f95541c708fa0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses