Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13-01-2025 01:08
General
-
Target
9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe
-
Size
17.4MB
-
MD5
3827adadf374dd3ab7d52129cf5af732
-
SHA1
8b263acd904ce7f4a771aa2b8a550438527b8e15
-
SHA256
9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80
-
SHA512
ec81f2eadda56f6f04d1bbda9ea018c490590b2ae7b47c2c92b0f59bf465b00c846af4b47dafa48aa6117377c704a12c375ba9b9c503c427769fc82557e9e1bc
-
SSDEEP
393216:bnH+my0WyNUHKocdtQsvcsM0wZzRA/Wbo4YkSbOTByWR:bHlyx9Hpcdast85CW87OIU
Score
10/10
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Blackguard family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe"C:\Users\Admin\AppData\Local\Temp\9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
17.5MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
2.9MB
-
Filesize
7.7MB
-
Filesize
408KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB