Analysis
-
max time kernel
94s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 10:06
General
-
Target
b97a8d18dbd372c648f3f06abe092833b3bbe4f81a41a146e8226709aa93439a.exe
-
Size
2.2MB
-
MD5
b947cb897c86aeb0a8c9fad5561cef8f
-
SHA1
cbca4a7897510f9fc17829c9a4ba77119d72ecb7
-
SHA256
b97a8d18dbd372c648f3f06abe092833b3bbe4f81a41a146e8226709aa93439a
-
SHA512
4ebff148f29b51cb3bb16cf8b260305081eb4eba1c25e3c0fa7a02cc13f22b60d89fb49ae76736d2aa89a37b3a27ab2371edec4e03216b4fe316c8db8adfc68c
-
SSDEEP
49152:Abjx9iUhsE/5hSg5zonCIKU6FexYPf7da5RU+TrDrxZIHt+GLSIW22:ex9iNE77zonNgexYnRa5RU+/DrxZVsSL
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b97a8d18dbd372c648f3f06abe092833b3bbe4f81a41a146e8226709aa93439a.exe"C:\Users\Admin\AppData\Local\Temp\b97a8d18dbd372c648f3f06abe092833b3bbe4f81a41a146e8226709aa93439a.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses