Analysis
-
max time kernel
100s -
max time network
106s -
platform
windows11-21h2_x64 -
resource
win11-20250410-en -
resource tags
-
submitted
15/04/2025, 23:20
General
-
Target
quarantine/main.exe
-
Size
5.8MB
-
MD5
76eac6fdb7196c67d98b8adfd58c8236
-
SHA1
5a3336cb4ed8ce34a261d82abc9a6f9c91abe8e1
-
SHA256
5c965130ead30c0baf74b086fe097b657cd4f5e34b4a2b2ef553912b10796c41
-
SHA512
0a080cfc7ad46f62947f141d38317ac8b27776e7f702f42bb3051c8a3a60bca4fe11fb0ab372ae12fee2ad8f825134ac3091df113df0e4df7d10c7eb1275863e
-
SSDEEP
98304:5F2AhEeqTeJBdYVgSAtvSYEnNpve6alcr+/n6qSIjVs5WLFu:rCnTgqaSAtvsnvz/K1a5W
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\quarantine\main.exe"C:\Users\Admin\AppData\Local\Temp\quarantine\main.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB