Analysis
-
max time kernel
92s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 09:31
General
-
Target
7cc82a4a6c4fe1adde7f236401656f5955abd73f2f32bb65d18787b7a5bf1883.exe
-
Size
1.5MB
-
MD5
0a3cd537329a75deee5079e13b99a11c
-
SHA1
417159da3295ae90a48436673a16993763930335
-
SHA256
7cc82a4a6c4fe1adde7f236401656f5955abd73f2f32bb65d18787b7a5bf1883
-
SHA512
781d8d9c2fbe6cdf831d7b5446e1a60e279baa2f1cec0ee6d65e8ed9ebbc3702bf5e38a67b81536784ae5d47a58fe3f28076131dee1d509fdd6a0e12300099e3
-
SSDEEP
24576:sbjxvhGkqMsFr59DXUzXWQArjrj32Nr8BiPe548DBuGBLE9VGH0JQR8RjtGZsOtN:sbjxrh27UXIjrjSr8YuvNuGBLEPsuGZ5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7cc82a4a6c4fe1adde7f236401656f5955abd73f2f32bb65d18787b7a5bf1883.exe"C:\Users\Admin\AppData\Local\Temp\7cc82a4a6c4fe1adde7f236401656f5955abd73f2f32bb65d18787b7a5bf1883.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses