Analysis

  • max time kernel
    24s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 11:02

General

  • Target
    Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
  • Size 2.8MB
  • Sample240802-m5hlcswamn
  • SHA256 f54deb01f98614fd94eb2954e0c909b2518370d4286767cd265f77f6588bff9b
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Carpetas de Archivos\X360CE - 32 Bits\x360ce.exe
    "C:\Users\Admin\AppData\Local\Temp\Carpetas de Archivos\X360CE - 32 Bits\x360ce.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        x360ce.gdb

        • Path C:\ProgramData\X360CE\x360ce.gdb
        • Size 19KB
        • SHA256 b7bc141ba4f3a0a04e1621effbcb06176acd05b1ec8ba7d4dd8b37784eba537c
        • MD5 SHA1 SHA512 SSDEEP

        memory/2972-0-0x000000007472E000-0x000000007472F000-memory.dmp

        memory/2972-1-0x00000000010C0000-0x0000000001394000-memory.dmp

        memory/2972-2-0x00000000005F0000-0x000000000061C000-memory.dmp

        memory/2972-3-0x0000000000F10000-0x0000000000F9E000-memory.dmp

        memory/2972-4-0x0000000074720000-0x0000000074E0E000-memory.dmp

        memory/2972-5-0x0000000004C10000-0x0000000004C4C000-memory.dmp

        memory/2972-948-0x0000000074720000-0x0000000074E0E000-memory.dmp

        memory/2972-949-0x000000007472E000-0x000000007472F000-memory.dmp

        memory/2972-950-0x0000000074720000-0x0000000074E0E000-memory.dmp

        memory/2972-951-0x0000000074720000-0x0000000074E0E000-memory.dmp