Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 12:57
General
-
Target
eb56b26388f393adf6389328f5122dfd2980d5e7df5818fe44e08c915234ca2a.exe
-
Size
1.6MB
-
MD5
a2391068ba119408c6881712a9ed7282
-
SHA1
23f0b5428b5e2b3ff5e248e232a533497f7e9488
-
SHA256
eb56b26388f393adf6389328f5122dfd2980d5e7df5818fe44e08c915234ca2a
-
SHA512
bfca3e2e20960e0faae03d9f4467eaf815e39dd7c9dc7e0e4de7d4a823a4a9e91015eab46b4d3b2141646e7d37528dfcecd50bf9ef7e65708fd0926ecdc3510a
-
SSDEEP
24576:mbjxvMT3hBEKIIo5r32jx0l8Y7DL8mMqX8Vs1iUWNPUUdq37wCKdztCRvyQ:mbjxw3hzVSvMmMg1iUZ37wZU
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb56b26388f393adf6389328f5122dfd2980d5e7df5818fe44e08c915234ca2a.exe"C:\Users\Admin\AppData\Local\Temp\eb56b26388f393adf6389328f5122dfd2980d5e7df5818fe44e08c915234ca2a.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses