Analysis
-
max time kernel
1337s -
max time network
1161s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
11-12-2024 16:09
General
-
Target
EnableLoopback.exe
-
Size
82KB
-
MD5
81564947d42846910eec2d08310e0d25
-
SHA1
b7a167dcd3afb29c8a0e18c943d634e3fc58a44c
-
SHA256
543f16b73f7d40177585332f433ce76dddc1526e12bcd62cb73edd11eb002341
-
SHA512
8f06409517697b022787bc9e2ed7e73100018422177aa3f63ecb406c3bdb6b021624f909a16fca0430002bfa7d35a461b38750c79c0273a154f63316b4e13037
-
SSDEEP
768:AREI16zcI2eupxmhm/ljPb0O7/Al25znrShUABg4CqnZx6qmmlkoxPLabCxf1mlr:y1HLdwOLFzrShURwZoxmlkoxDtfIIM
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\EnableLoopback.exe"C:\Users\Admin\AppData\Local\Temp\EnableLoopback.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
96KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB