Analysis
-
max time kernel
119s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25-11-2024 18:07
General
-
Target
bin/vncviewer.exe
-
Size
1.1MB
-
MD5
2d2492a41b9b20a5ec7e49cd06cb3dcf
-
SHA1
b5ec3a4f8afbc24bf56ec94d50f21dd51a33db54
-
SHA256
43a84ce7d64d0f3807d82944fb9ed34be0176c38739f140a680afe0a150b38c3
-
SHA512
bddc86bc57e47af5fc108b5b3e12153d2db2d4fddd78a993b02e3bf6674bb649ef894c5df564b2fca696f0c0d68d532bde06f345d26698e62500d16cfcba6f8f
-
SSDEEP
24576:cSoqDcDb6VMIxTgl5J+Tv4xFjyJ3smj3M5lczu:cSoqDc7IxTkJ+Tvahmj3M5l3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\vncviewer.exe"C:\Users\Admin\AppData\Local\Temp\bin\vncviewer.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam