Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 14:22
General
-
Target
ExL4unch€®.exe
-
Size
19.2MB
-
MD5
b2f3fcd2a82e9281542bae77b0828861
-
SHA1
b5930c2c4ba8ab462f510b316fbfe9a8330dd143
-
SHA256
6c70de6433c7d4e05aaee6447aa4f5ae6cfe5863dd767f1555f7a7d32d648ff4
-
SHA512
6b5468132c7019240f49f788716b73d90b6b97bc087574ed1a8e646588155d6477df7fcf863ae60e65c3c7345da2d993735f9b49e1014dbfed3496a7de0229e9
-
SSDEEP
393216:SoUUNGMqPezRs7v7SARUPcr8wfmkdAPw3Sg:omR87SAR/wCBsQ3
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ExL4unch€®.exe"C:\Users\Admin\AppData\Local\Temp\ExL4unch€®.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
MD52b80d509fd714d26ce44825e394c275a
SHA17b5a3b26153f1981556e8d75bc95b4f77bc4f070
SHA2564c8c17ae8be6259c83feaba4fc114ea0116b506cacd29726758e2b0c1adcc30e
SHA5121abf0ab67b26b1a4de8a0389ad7464e51bb911de23ffc0a50a97961e575a5b8ee49691716f30c37407d5a7fa36cf8ce07f8b954dd0c6198070a384a6b156a47a
-
Filesize
4KB
-
Filesize
8.2MB
-
Filesize
1.5MB
-
Filesize
2.0MB