Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/08/2024, 10:06

General

  • Target

    CaptchaHackerMailAccsCreator.exe

  • Size

    1.7MB

  • MD5

    9858ff89df6779dcf18159ba9b8b19e0

  • SHA1

    0ff5afc4be16da2b7ed9bcbfb0f80378a8c64d60

  • SHA256

    12ab8d0ca329e85757f1451ae61fa8909aeae0fac3c16423e3ee4165fa70aac2

  • SHA512

    38ea95f7119fde7ae46b5e1686d355cf55deaa7f54fa5ddffb5c48eedc48170396d8b58bea07a98bcb22dc0cea5d6c662111725d62e9fbee7ba7f1f687d9f9e8

  • SSDEEP

    24576:TOxhVzbWXuenoB4+fR0EFrQp2WYoN0h1JFC6wk7JqiuYr+JaIO+iygJTU:TOxhP7RQOoNa1JFC6wk7D1f/JT

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CaptchaHackerMailAccsCreator.exe
    "C:\Users\Admin\AppData\Local\Temp\CaptchaHackerMailAccsCreator.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3204

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3204-0-0x00000000007B0000-0x00000000007B1000-memory.dmp

          Filesize

          4KB

        • memory/3204-1-0x0000000004660000-0x0000000004661000-memory.dmp

          Filesize

          4KB

        • memory/3204-7-0x00000000007B0000-0x00000000007B1000-memory.dmp

          Filesize

          4KB

        • memory/3204-9-0x0000000004660000-0x0000000004661000-memory.dmp

          Filesize

          4KB

        • memory/3204-8-0x0000000000400000-0x00000000005B7000-memory.dmp

          Filesize

          1.7MB