Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-12-2024 09:40
General
-
Target
fe1ee9ecac4633907bf564b4c4068f0a4c32887138312e93653ba6954478a053.exe
-
Size
161KB
-
MD5
eae424bb5a92a40374cb234de298199b
-
SHA1
8ae3cfd89a3b102e50e6b0d66b4ba09708115373
-
SHA256
fe1ee9ecac4633907bf564b4c4068f0a4c32887138312e93653ba6954478a053
-
SHA512
b7fa10021ffdc687b062954ac0b960279dd3a6d3178189fe60e2257085358af214d864be5970e6daf3016d947443f48c6ca7cb78afa4ba5111f9d4095a07c4db
-
SSDEEP
3072:sd3SoRYw/VXW80KeQoBWIJ0xKAG50NlQvh+5v4TR2b1Nm:sZSo75WCvoBL/AGF05b1N
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe1ee9ecac4633907bf564b4c4068f0a4c32887138312e93653ba6954478a053.exe"C:\Users\Admin\AppData\Local\Temp\fe1ee9ecac4633907bf564b4c4068f0a4c32887138312e93653ba6954478a053.exe"1⤵
- System Location Discovery: System Language Discovery