Analysis
-
max time kernel
95s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 11:05
General
-
Target
9bddbc0a56e82274b65085f762a59b245c55c5abd88b519c9aefd63c0f383fad.exe
-
Size
312KB
-
MD5
fbbfa1df95059aed7e93785ad171799a
-
SHA1
0ced6409c572f2555bec98438d27bb9e97bd9e73
-
SHA256
9bddbc0a56e82274b65085f762a59b245c55c5abd88b519c9aefd63c0f383fad
-
SHA512
859336a640a18c92822214fe1283f37fe71d42b0b19c0abf2c7288c21a3a78531c3f59601b9d828a6142b37a04dfdfb31eab849ba9c9e8d0cbccb8b1b8cb3298
-
SSDEEP
6144:KDW3RMVNnE/ApfzkyPH6vgT3RlontcMBQRFQA3D/1D/:PyVJ4ExvpctcLFQAT/1/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bddbc0a56e82274b65085f762a59b245c55c5abd88b519c9aefd63c0f383fad.exe"C:\Users\Admin\AppData\Local\Temp\9bddbc0a56e82274b65085f762a59b245c55c5abd88b519c9aefd63c0f383fad.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses