Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/08/2024, 17:12
General
-
Target
cfClient.exe
-
Size
3.0MB
-
MD5
2992cab4d1c491bc4c926d38966e3ba3
-
SHA1
93ed20918a2ebbfaeaa167de63911ad181d6b16f
-
SHA256
8cd261f816341ef1d9c3b34c1ada38831272b8c1ee2639203d4e2b6579fad5c8
-
SHA512
16441f88d2f9802223b4876cf35ab1514c7a9d23410cc8b01137316067eee230524813914a290ddb1a8a393db5102f3940febea22d945594cd543891692bb54c
-
SSDEEP
49152:Bisg+ENMeF4Iso5dFzQ/Nb7omtgUCvT1hPB/rAFmkgwxzk:BisgwE30gUCvT1hPRkUVf
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfClient.exe"C:\Users\Admin\AppData\Local\Temp\cfClient.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
3.1MB
-
Filesize
4KB