Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2024, 06:10

General

  • Target

    6631c6b7020d286e6eca0a6350083710N.exe

  • Size

    647KB

  • MD5

    6631c6b7020d286e6eca0a6350083710

  • SHA1

    f6e3825bb3dac1b777b40e3e5fd5e5360686dc7d

  • SHA256

    2f423a5af8ca89aa8c73887cf2c6f996aae4d3935a9cc0d17790d5ebd488360e

  • SHA512

    a8359356b8121396b9bf56938fae99115a4d2acdb402179e29584e399d61ac0f84a20e9ba1a997ab5a89e5d1319c6865ff432f25ab8c01b16dc2d6cbfd2eae8e

  • SSDEEP

    12288:zJB0lh5aILwtFPCfmARfK7CHh2EV4CnEleIgdmm:zQ5aILMCfmARfL7n5j

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6631c6b7020d286e6eca0a6350083710N.exe
    "C:\Users\Admin\AppData\Local\Temp\6631c6b7020d286e6eca0a6350083710N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3940-5-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-14-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-13-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-12-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-11-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-10-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-9-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-8-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-7-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-6-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-4-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-3-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3940-2-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB