Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-11-2024 02:44
General
-
Target
260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd.exe
-
Size
416KB
-
MD5
e87fdcb2a16ae7237d61aed2ca0fd582
-
SHA1
3b643c89ab2000818a037b542d833047613e4b8b
-
SHA256
260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd
-
SHA512
7024bd7ae06b3468a901b3682525bf94612bc2cbd03027fb9cd85e64c0b7b3a6521fd55ac5525fe79599d64fcabcb98c8ba5f22a52769a810072d21964231164
-
SSDEEP
6144:MVOFpfTNHxOQCh9u96DncKfZqEcIJVLYww89yIRAOU+/XpcBDcBpOkS:MVOFpbNhCy6wvEBJVkwLjq+RcmOkS
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd.exe"C:\Users\Admin\AppData\Local\Temp\260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage