Analysis
-
max time kernel
88s -
max time network
101s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
29-11-2024 08:48
General
-
Target
windhawk.exe
-
Size
763KB
-
MD5
4e26dc9976c4577830c9b287b3b9633e
-
SHA1
f257668bc1630e82d7a9e2b91fbd16440a9f0d72
-
SHA256
685d95cc192a9a46869d11b5f3dab7945c0570f4e5972a02042fde2257e96f87
-
SHA512
8c3d5bf8e76547321031047c2593e3da6ab1e8ca75d1f38922f87a5a2d5a455c8207984a2ccd5ee806fcbbdbc58574ca859bb8009d1d87d132c5110edf411b2e
-
SSDEEP
12288:Lnn5zNKqg5ViEBfXBKfj24qOlWEUUssUefST2lqBU:LnZ4qM/XBKfDjWEUxshq2lqy
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\windhawk.exe"C:\Users\Admin\AppData\Local\Temp\windhawk.exe"1⤵
- System Location Discovery: System Language Discovery