Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
17-12-2024 01:01
General
-
Target
New Order - FE7191PO100783.exe
-
Size
1.0MB
-
MD5
3b0b19f4633cd670ddccedf63c8da816
-
SHA1
1d97973a78dfec2d521f897fe5ece3b43270d0fb
-
SHA256
f2da9d120298fd2d3ecadc1d143e138bb8d8a6d2e7190e600fe7e2bf4df598e1
-
SHA512
b66dc9dcd2a99876ef6eac97cfd1ba9328356f9e1f48741a4390f14be0d2b82af492849a88e15f960e5ac7b59365fcd7cb69ee32900a376b997b1c6cc4d0c279
-
SSDEEP
24576:Zu6J33O0c+JY5UZ+XC0kGso6Faoz32QPMZUHrWY:bu0c++OCvkGs9Faoz4Y
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\New Order - FE7191PO100783.exe"C:\Users\Admin\AppData\Local\Temp\New Order - FE7191PO100783.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB