Analysis
-
max time kernel
93s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 11:12
General
-
Target
df2c3890ac96793e8c51d060e395739a00e9845cb01e2bd6e6ab96bc332fdf93.exe
-
Size
5.2MB
-
MD5
1c1b4c9e55fc341296e18358f5422801
-
SHA1
835821065c29b2cc3319bf634389d35e9e55f5c7
-
SHA256
df2c3890ac96793e8c51d060e395739a00e9845cb01e2bd6e6ab96bc332fdf93
-
SHA512
dad48888b94aa090008d1a3f6dcf4b7177862e4583578176cfd2ed9ba99eaa1602e7547eff495d58b4b659fe8c3a4ff214cf4d0522e777d9aab678019610243f
-
SSDEEP
98304:tx0HHsLMbFPyDoVDnyriRBexEBlCIqSrlDzijhYv:n0HHsQbFP1BnyriGKhpz
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\df2c3890ac96793e8c51d060e395739a00e9845cb01e2bd6e6ab96bc332fdf93.exe"C:\Users\Admin\AppData\Local\Temp\df2c3890ac96793e8c51d060e395739a00e9845cb01e2bd6e6ab96bc332fdf93.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses