Analysis
-
max time kernel
95s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 10:10
General
-
Target
c402cc9d3195699837db9e027834654998be983b4743a41dcc0cd3b83e04c253.exe
-
Size
3.6MB
-
MD5
2265bd1835d93e665ff3f5861a6f3fa4
-
SHA1
30ad75a8e6400f8963761934a5f95439b49261f6
-
SHA256
c402cc9d3195699837db9e027834654998be983b4743a41dcc0cd3b83e04c253
-
SHA512
a7d1915b15936afee094b62235a542861abc7eb4b32b7b3d16f88f34436a4fe4955ac88029dee3a41a59240ccff15f175f05712ceaefe09c596fb1a0bdecd338
-
SSDEEP
98304:hx/k5foEwnCgbkukVXa5qGIRU8KP6EaP7Aq3/F:bs5vmCxuAKaUH9c7
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c402cc9d3195699837db9e027834654998be983b4743a41dcc0cd3b83e04c253.exe"C:\Users\Admin\AppData\Local\Temp\c402cc9d3195699837db9e027834654998be983b4743a41dcc0cd3b83e04c253.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses