Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05-12-2024 13:00
General
-
Target
Drawing&spec.scr.exe
-
Size
941KB
-
MD5
3a43f4d6c1ce25bc8efe548fa2b16bc7
-
SHA1
e0b8080d2c241ee9c8d7d31adb6ecc0fc43d0a0e
-
SHA256
4b5cc1e99d28651fbb693422c5d392c5d47dfa61c8ec4995197706de5cb3442a
-
SHA512
3613b2af89545273fb21c09889e02e477d86ac2e3f313fec2a28fb68c9e94b39b3160b26d7637dce1e5053808ffe14cb0aad9dd0c404bbd6d4c8d7ea897e8072
-
SSDEEP
24576:uu6J33O0c+JY5UZ+XC0kGso6FauSnJzxWY:gu0c++OCvkGs9FauSaY
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Drawing&spec.scr.exe"C:\Users\Admin\AppData\Local\Temp\Drawing&spec.scr.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB