Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20250313-en -
resource tags
-
submitted
09/04/2025, 08:25
General
-
Target
4b482e8492e8c1943330745899214b29bfd2582000371243400d854838dfb88c.exe
-
Size
2.5MB
-
MD5
00ba12848375131325b23c2f4702f734
-
SHA1
a861409df382894ad7a5ce066d61b409eb67b28e
-
SHA256
4b482e8492e8c1943330745899214b29bfd2582000371243400d854838dfb88c
-
SHA512
e87a899aeb01d626b66a0a3cd6545cb4cb4c2ab7889db8870872312103d83c4a9baa19bac9ed637bb48753a2f28f898c4dcacc32e045460026bd4b9e7ae3fab8
-
SSDEEP
24576:+lc5ixEriBL+3y1njfVpgqO6x+xGUFyZHcLe9OX+ha1LgSaNXETaR8y3HRDCxkMs:+Op3yn5hO6OCuHXpUJhDCxfYXfYPW
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b482e8492e8c1943330745899214b29bfd2582000371243400d854838dfb88c.exe"C:\Users\Admin\AppData\Local\Temp\4b482e8492e8c1943330745899214b29bfd2582000371243400d854838dfb88c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.5MB
-
Filesize
2.5MB