Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09-08-2024 21:24
General
-
Target
2284-27-0x00000000000F0000-0x000000000015C000-memory.exe
-
Size
432KB
-
MD5
bc21644388425f260272a8d41b22b420
-
SHA1
cd2d00f5388c18a5d33159e4c3a5e5be0ccd17f4
-
SHA256
0662d8bd5e1327b97ae7ab838e7ee4499b39f66e792de788059d3615f35b4e84
-
SHA512
dba597e1919ca18d1b4080656692c56ab482ad9395ccc9ca85d8bae0aea02d09f86806ab88184c8a4ce44f69d529769ff4f2295d68ce0547b3836dc47e933355
-
SSDEEP
6144:M8PpVW751MlpnZO4SE24v8bJAJ31/vKl19c7KyL+Yz3feEFj7HrTDJ:BpVWrMlLlSE24v8VChKZSKyxeS3Hr
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2284-27-0x00000000000F0000-0x000000000015C000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2284-27-0x00000000000F0000-0x000000000015C000-memory.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx