Analysis
-
max time kernel
146s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-12-2024 02:23
General
-
Target
7230b549346dbab880d1d713d8c9dfc1005065c0f0cebb16ad4f1a15f05d088a.exe
-
Size
1.1MB
-
MD5
a9c526f3a276012d554ac382a90bca3d
-
SHA1
34cab3f18d9a7efa115e154609fded0c2b96f9c8
-
SHA256
7230b549346dbab880d1d713d8c9dfc1005065c0f0cebb16ad4f1a15f05d088a
-
SHA512
7c62fbdc6cb645b0a9056786ed3277a1016b47949f6193271a1474b573c4f7c3845e518bab207c1d4e4d85aee64bb4ec6cc5605534c3f6e52d24248007d4e5c1
-
SSDEEP
24576:0RmJkcoQricOIQxiZY1iaPHwLDjz1yoVzUPbLwzmmhZJY5:RJZoQrbTFZY1iaPHUMoVzUPgpzJY5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7230b549346dbab880d1d713d8c9dfc1005065c0f0cebb16ad4f1a15f05d088a.exe"C:\Users\Admin\AppData\Local\Temp\7230b549346dbab880d1d713d8c9dfc1005065c0f0cebb16ad4f1a15f05d088a.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam