Analysis
-
max time kernel
93s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 11:12
General
-
Target
e8f11a23be4137c7710f259f201ddc501b0f86ec0a203bc4d6abd341ac1184b0.exe
-
Size
2.0MB
-
MD5
a175fa412f281ac8b7f7910e5e669343
-
SHA1
b6407073e85db1d93f258677457168f297484a00
-
SHA256
e8f11a23be4137c7710f259f201ddc501b0f86ec0a203bc4d6abd341ac1184b0
-
SHA512
c2a56b7cb06dae1ba1e1ff83b7f0135904d1fe4e0fcd7177865845f144123325ea71d39d867db03a8f9185a72a17b807e5e55339870382213c29111ee8d1d035
-
SSDEEP
49152:+bjxLvE9AmvGGFsDJVkTr6B4OiCWtibUZme+AN:oxeA63FEkDJt1Zm
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8f11a23be4137c7710f259f201ddc501b0f86ec0a203bc4d6abd341ac1184b0.exe"C:\Users\Admin\AppData\Local\Temp\e8f11a23be4137c7710f259f201ddc501b0f86ec0a203bc4d6abd341ac1184b0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses