Overview

overview

10

Static

static

1

ebf59f8f0f...e6.exe

windows7-x64

6

ebf59f8f0f...e6.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06-12-2024 09:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ebf59f8f0f1701f73f72b674104d460d9a3247a6978bc2c722ba9c2e3f92fde6.exe

  • Size

    170KB

  • MD5

    f7e04e3049ca18c4913b2e119f21b9ec

  • SHA1

    e9febfc187572560b5e341c78cf85e337e519313

  • SHA256

    ebf59f8f0f1701f73f72b674104d460d9a3247a6978bc2c722ba9c2e3f92fde6

  • SHA512

    3933209da5c285372783e045aceb8f3d962365fbc3a4bbb02f7a88bdbb174cf083350b7046ca861a615313c8f81b928585c76d619fb646f39411554a65868971

  • SSDEEP

    3072:2wfGVibRB5zlyH2d6spw9MAu2FJJr/T+kHNPXGTkWZASbmpc8:2wFB7yH2noMArnJTrPGu7

Score
6/10
discovery

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\ebf59f8f0f1701f73f72b674104d460d9a3247a6978bc2c722ba9c2e3f92fde6.exe
    "C:\Users\Admin\AppData\Local\Temp\ebf59f8f0f1701f73f72b674104d460d9a3247a6978bc2c722ba9c2e3f92fde6.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1840

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads