Analysis

  • max time kernel
    690s
  • max time network
    436s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-08-2024 02:25

General

  • Target

    Hoic/hoic2.1.exe

  • Size

    8.5MB

  • MD5

    451c94a23536dcbba422d7612b34b6ff

  • SHA1

    0b419c8b9f60cb9cb8957a6dbccb393b5d072e43

  • SHA256

    3c9806f8e132917ef85512505fadaca733e5523c271dd2e2a6925ddb9c3d0df0

  • SHA512

    b777963ab9d21efa29528e6a126e616088205aff9e1b63453c731966dccf5f15cf30f17a933d40c98347a2d057b5f2cb40e40847f41476f0f212b28ce12e94de

  • SSDEEP

    49152:XKgsEyTPOoMjJWPDYtoAoB81BE7nNeHhkD9d5VGokmPh2U69mNGkpETUPSGvVuWs:TsEaQWrYtlKheZmq9ANP61tmf

Score
9/10

Malware Config

Signatures

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Hoic\hoic2.1.exe
    "C:\Users\Admin\AppData\Local\Temp\Hoic\hoic2.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2680-0-0x0000000002650000-0x000000000274A000-memory.dmp

    Filesize

    1000KB

  • memory/2680-1-0x0000000010000000-0x00000000100C8000-memory.dmp

    Filesize

    800KB

  • memory/2680-14-0x0000000002770000-0x0000000002790000-memory.dmp

    Filesize

    128KB

  • memory/2680-5-0x0000000002610000-0x0000000002620000-memory.dmp

    Filesize

    64KB

  • memory/2680-21-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-22-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-23-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-24-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-25-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-26-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-27-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-28-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-29-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-30-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-31-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-32-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-33-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-34-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-35-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-36-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-37-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-38-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-39-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-40-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-41-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-42-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-43-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-44-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-45-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-46-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-47-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-48-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-49-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-50-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-51-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-52-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-53-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-54-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-55-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-56-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-57-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-58-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-59-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-60-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-61-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-62-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-63-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-64-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-65-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-66-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-67-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-68-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-69-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-70-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-71-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-72-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-73-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-74-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-75-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-76-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-77-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-78-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-79-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-80-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-81-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-82-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-83-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-84-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-85-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-86-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-87-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-88-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-89-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-90-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-91-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-92-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-93-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-94-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-95-0x0000000000740000-0x0000000000742000-memory.dmp

    Filesize

    8KB

  • memory/2680-96-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-97-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-98-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-99-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-100-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-101-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-102-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-103-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-104-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-105-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-106-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-107-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-108-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-109-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-110-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-111-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-112-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-113-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-114-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB

  • memory/2680-115-0x0000000000610000-0x0000000000612000-memory.dmp

    Filesize

    8KB