Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
10-08-2024 07:24
General
-
Target
新建文件夹/Sis_agp117e/AGP/htpatch/HTinst.exe
-
Size
88KB
-
MD5
e09249b5b2beab68f1c80690bb924e4a
-
SHA1
c378240a55d6065e7bbf88464a7e8bcfff5ced03
-
SHA256
7303cf939fcb27744e80c69cd35841f9f412b3d57dce689d5a3c7d16b9db4add
-
SHA512
54d3714244d1f88801b7e8d9e9dd1727de5e49aa3e3ba5f045aad7d4364553511d6f5e49a8b874546829175ceb844fd4484a1ce6aa09ef940991d80e47d6b994
-
SSDEEP
1536:IZW8KEgzTgK9cWZunX765NH/QBrqoaiSqeXzbUs:deKqWZLDH/Roait+zbb
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\新建文件夹\Sis_agp117e\AGP\htpatch\HTinst.exe"C:\Users\Admin\AppData\Local\Temp\新建文件夹\Sis_agp117e\AGP\htpatch\HTinst.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx