Analysis
-
max time kernel
13s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
14-01-2025 15:06
General
-
Target
COMPROBANTE FAC PAG 1312025pdf.exe
-
Size
1.0MB
-
MD5
e4ae748b24c33178f1203895c632daef
-
SHA1
9e6bd03f721da74a1412f80ed5615c14ef85434e
-
SHA256
920dba5848da51e0cd39ced7ef38fd1640e9aa0142b75a5a957ef7abf879a298
-
SHA512
f0e9ee3d27fb29918d5b12f4aa48d66f6fe7ca13081ee1e011ecdac22506b6f45b0095a3c6655d398a9e02a84f7c56441c341a3c37fb432956f5fbde2d5154d3
-
SSDEEP
24576:wAHnh+eWsN3skA4RV1Hom2KXMmHaecUtHlGAcg5:nh+ZkldoPK8YaecUtHlB
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\COMPROBANTE FAC PAG 1312025pdf.exe"C:\Users\Admin\AppData\Local\Temp\COMPROBANTE FAC PAG 1312025pdf.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB