Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 12:54
General
-
Target
2728ca448151ee8ae00f55a832e4a24e4d26d5f3a84ee4ae5a273dc7efcaeea3.exe
-
Size
2.0MB
-
MD5
8491386d59d0500e7ef58a22f3543a00
-
SHA1
296eef1277cbec671ac62c0b6453366ce9dd2926
-
SHA256
2728ca448151ee8ae00f55a832e4a24e4d26d5f3a84ee4ae5a273dc7efcaeea3
-
SHA512
0ed268cca8f595952aad7b31269ad6e7989e04e7216f23edbde8cb11ebefa3afc7eafddda1d2bb80822122193be880515a2c2d9e6c8be08da5817b7cf1e3980e
-
SSDEEP
49152:+bjxjEMEvyKXt5QLXAkfEBSDSPM7JKh+FDdIxixjSIXl:oxYMEvyKd56XEBcfjR2ix
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2728ca448151ee8ae00f55a832e4a24e4d26d5f3a84ee4ae5a273dc7efcaeea3.exe"C:\Users\Admin\AppData\Local\Temp\2728ca448151ee8ae00f55a832e4a24e4d26d5f3a84ee4ae5a273dc7efcaeea3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses