Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 14:44

General

  • Target

    KesionEshop V8.0 Free.exe

  • Size

    10.1MB

  • MD5

    d03dc66efbde459fbf6c1fcbeaf63993

  • SHA1

    443b2f2f46be959ecffcb1c7475f76a2e6b33a22

  • SHA256

    1b79d753e39568bf7877e1581770c7a87b452bfe44e1af1dcb80d6d6f65b106e

  • SHA512

    6c7c4999c9baa2d2b25d7a00298ea22b2d0b3e3e1bc0b7d5c94c7b965af2a807d23299a187aa44e749768ff24b8436ffd61155f712a4707d6305432ad1b312c1

  • SSDEEP

    196608:ERrAetk+92yMAYgCTvXpwWznDlnay4Lx+RjJYWDFrQR6JyNKbikJuj786:ERrDJ2fAYRb5wUBavwR+WDFrQcEAvUjv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\KesionEshop V8.0 Free.exe
    "C:\Users\Admin\AppData\Local\Temp\KesionEshop V8.0 Free.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads