Analysis
-
max time kernel
144s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
26-07-2024 17:00
General
-
Target
spoolsy.exe
-
Size
266KB
-
MD5
25ca7beed707e94ce70137f7d0c7b14e
-
SHA1
f77430c58ea65be298007338f489a5809260690e
-
SHA256
b0ed15fd1f4084efaaaf0c1f8291e70a86f8fbc70e57e648ab88e81293ef79c2
-
SHA512
9c92c58d8d5ce6cce67e55fb3a8ba5829da30b961a3a7412166ccbb217c9fcc599889625060bd99e4f20678ccf7b907b81ba5c501385b282650573b28e9897f7
-
SSDEEP
6144:t/X3pred59z/JFZyLFoWZD/2KkFjpYonoNjTHeE1lXukRO5ItO:tvwd5NJFZazeFF+gCTHeQlXukR5O
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\spoolsy.exe"C:\Users\Admin\AppData\Local\Temp\spoolsy.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
840KB
-
Filesize
840KB
-
Filesize
4KB
-
Filesize
840KB
-
Filesize
4KB