Analysis
-
max time kernel
140s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10/08/2024, 07:24
General
-
Target
新建文件夹/Sis_agp117e/AGP/htpatch/HTinst.exe
-
Size
88KB
-
MD5
e09249b5b2beab68f1c80690bb924e4a
-
SHA1
c378240a55d6065e7bbf88464a7e8bcfff5ced03
-
SHA256
7303cf939fcb27744e80c69cd35841f9f412b3d57dce689d5a3c7d16b9db4add
-
SHA512
54d3714244d1f88801b7e8d9e9dd1727de5e49aa3e3ba5f045aad7d4364553511d6f5e49a8b874546829175ceb844fd4484a1ce6aa09ef940991d80e47d6b994
-
SSDEEP
1536:IZW8KEgzTgK9cWZunX765NH/QBrqoaiSqeXzbUs:deKqWZLDH/Roait+zbb
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\新建文件夹\Sis_agp117e\AGP\htpatch\HTinst.exe"C:\Users\Admin\AppData\Local\Temp\新建文件夹\Sis_agp117e\AGP\htpatch\HTinst.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4216,i,15336851255456239337,16379811035920490645,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:81⤵