7b4f0026de0ae5880ddb853725015d617a17f4405de54fa009d18ec020150cd3

Analysis

max time kernel
150s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20/08/2024, 09:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

uRage 186054 Gaming Mouse.exe
Size

2.6MB
MD5

9e0343414cf0a854fd554c5db4919992
SHA1

7dd38e9e98a4be05ea6fbde37fb5bfe62abb8914
SHA256

9e47127d61987291208ea4e25ca6efb58a6ae568e3fd284ed004e1d2c9317c08
SHA512

38a323be5dc2cee2585d66e862ed54bbfd1fd67f24b12e17faa39ce0d261c4d852b2e89700f704ffe81a740f95a8ffe67f3e2a7133361b56b4f6b62967f656a2
SSDEEP

49152:r4UwRa3Os1VEpjJ/6ibyb0T9KnL4omwsVgZYFbEeZ+MkiuBEiUW3sVW4Ln5Pelez:EUw61VEpjJ7bybMKnkosVg6FHZ+MkiSW

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	uRage 186054 Gaming Mouse.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
920	uRage 186054 Gaming Mouse.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
920	uRage 186054 Gaming Mouse.exe

C:\Users\Admin\AppData\Local\Temp\uRage 186054 Gaming Mouse.exe
"C:\Users\Admin\AppData\Local\Temp\uRage 186054 Gaming Mouse.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\uRage 186054 Gaming Mouse\mouse\ShootData_2.Shoot

Filesize
13KB

MD5
711f5bb63c9276cc228ee5d06ce12dfd

SHA1
bfa9bb78775c130bc99c1f7b1e31b6311d7bff93

SHA256
45ae9981d9d7b0c2fc1b0142b8a20e3a3ba8be6df4ae241670d53c307b2dfc18

SHA512
fea31aee1396c3e735a499e159ca86e4c375cd398cc9236325953e5fcef3c648d491686c1f5ca894bd2bdfc01b9bc93fd8d1caaa9f7d9dc2df9aeb612bc48d91

Download Submit