Analysis
-
max time kernel
138s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-01-2025 00:03
General
-
Target
large PF File.exe
-
Size
704.0MB
-
MD5
7d2aeb8f853a52c4d95c3ce09b5d0f68
-
SHA1
3e75e55b6cef5921de718ac6de0a825449c8e6d9
-
SHA256
889fa5d3887c594b193b7288c0b5ee51383e94e1f2f5c731e333ed094fa5b291
-
SHA512
4b0873adfe744586dd8d30099154423c9ae97cae97087a0eb6fcae0873e40844fbb2562a279577de321cd8005ce85720d8d717bddaf1001a2f37673617ad7605
-
SSDEEP
49152:7dx4HDQNJL0UR6SgMt+k4RiP+RmXMjiINiMq95FoHVHNTQTEj3333wI+RrTK0S:gHDYrqiPRhINnq95FoHVB3333CRrO3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\large PF File.exe"C:\Users\Admin\AppData\Local\Temp\large PF File.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
3.4MB