Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
12-02-2024 19:41
General
-
Target
d466abfb1a85ab690680b5f21a3e9cbb76a14848cce99bba6a75ed58fe675b78.exe
-
Size
4.8MB
-
MD5
c798918e3e39c16f7215faa310474ba5
-
SHA1
5ea8aebe55c033f7ab10159c59138083a8395451
-
SHA256
d466abfb1a85ab690680b5f21a3e9cbb76a14848cce99bba6a75ed58fe675b78
-
SHA512
1bb68a0db1392cb620110c9c2cd1c2eb53ac72f7052798a1d8b746ae1ed1cdfa17f041113bbf5cc454b77690344f5c8b0a07ccaa09dd9402cac77d2cbcf290e2
-
SSDEEP
98304:OQxqn48FFdqD8XGA3soumrhZsVczMuSPPwa:ON4iFKfbwhFEPYa
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d466abfb1a85ab690680b5f21a3e9cbb76a14848cce99bba6a75ed58fe675b78.exe"C:\Users\Admin\AppData\Local\Temp\d466abfb1a85ab690680b5f21a3e9cbb76a14848cce99bba6a75ed58fe675b78.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx