Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-08-2024 05:01

General

  • Target

    050f66976f940c339f96aebad219db0cedce4563c0946330b8decde2fc28fb90.exe

  • Size

    8.6MB

  • MD5

    2ed219ec34fc841af2382cdf119fe756

  • SHA1

    ed46c951257b91cdf32a17dc9bae66ce08c8ae79

  • SHA256

    050f66976f940c339f96aebad219db0cedce4563c0946330b8decde2fc28fb90

  • SHA512

    962770e9d676a8302e0062e11e2907169d4bcd6d284040bc94e1fae1d6f59ca95881f2974bbb765c3dd2d456967758608638484e61a993b0a5144f9b38551e80

  • SSDEEP

    196608:R83R4hCkeQOQu3l4du81bCgsOq92j9CMamrsN7iPN9KlMPG/KZbtLt:RA4hHXg4duWuLOol807i19Kyf

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\050f66976f940c339f96aebad219db0cedce4563c0946330b8decde2fc28fb90.exe
    "C:\Users\Admin\AppData\Local\Temp\050f66976f940c339f96aebad219db0cedce4563c0946330b8decde2fc28fb90.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1556-0-0x0000000000400000-0x0000000001925000-memory.dmp

    Filesize

    21.1MB

  • memory/1556-3-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-2-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-1-0x0000000076750000-0x0000000076751000-memory.dmp

    Filesize

    4KB

  • memory/1556-4-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-6-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-5-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-9-0x0000000010000000-0x000000001022C000-memory.dmp

    Filesize

    2.2MB

  • memory/1556-14-0x0000000000400000-0x0000000001925000-memory.dmp

    Filesize

    21.1MB

  • memory/1556-18-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-17-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-16-0x0000000076750000-0x0000000076751000-memory.dmp

    Filesize

    4KB

  • memory/1556-19-0x0000000076730000-0x0000000076820000-memory.dmp

    Filesize

    960KB

  • memory/1556-20-0x0000000000400000-0x0000000001925000-memory.dmp

    Filesize

    21.1MB