Analysis
-
max time kernel
139s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10/08/2024, 19:41
General
-
Target
nwwf/nwwf.exe
-
Size
877KB
-
MD5
92f30c5105e7db6b7741586b84756b39
-
SHA1
09917c8352c4fb862ec258a95e06e8139559696c
-
SHA256
7d40b45b0c06698e9459ca420faaae215292d1be953982e91cf58aa1e261a42a
-
SHA512
9256aaeda857c33ab3f27a278c8663850b4e40fd761bbb6774984d4a832d7a0185d1835a03b4a1599b7a08db567b8b7d0e47d9f1a9a56a68a8f208eeceaceecd
-
SSDEEP
6144:gssR6/9JXwIxYJZaEfc7E1Elv3cyokiQ3fP:qR6/bXQJZaEfc7rUjE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\nwwf\nwwf.exe"C:\Users\Admin\AppData\Local\Temp\nwwf\nwwf.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB