Analysis
-
max time kernel
94s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
01-02-2025 15:35
General
-
Target
$_58_/wtzltypssnrzhu.exe
-
Size
10KB
-
MD5
9916cd804c030ab91eabab4c3d1f39f6
-
SHA1
d01995ac1f61a17211b0c942d38504e35ac89c1a
-
SHA256
6920bf36c100c838c5fcc48b3665f660e0c158449ed1a42f64cb1c054cf90eef
-
SHA512
db60ef4e82328841153114c002c7d7664c5f7b7e5a916ea106912a0fe5a9f86a4ffc0a8f062f3cc974982efbc9b0ee7ff56582efe77e34dca001fc8b79d8ccc4
-
SSDEEP
192:vsfWUOxk5LhBY7FvXRySmUUHDfZiMHnvvRftC5ETf:4WxiheFv0SmUUHDfZTHnv5ftC5ET
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_58_\wtzltypssnrzhu.exe"C:\Users\Admin\AppData\Local\Temp\$_58_\wtzltypssnrzhu.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
7.7MB