Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
22/08/2024, 12:20
General
-
Target
百度登录发博/百度登录发博.exe
-
Size
728KB
-
MD5
b56c48be379fff239c3483f25c70b536
-
SHA1
c274b5e0035608e8721c492343dab6f62fa3ea2b
-
SHA256
72fa005cc19c770dd749fc28e024ec8139353d51d995fe9cb5c8003d21033634
-
SHA512
5489530c6b7575c110e0cc54a5a0f717881adbb3a91cbaeb9c0d3d4dcd8f8f4b76d2cf819c209178add1b981967994240ed2e121cc47caf217949a5120adf8bd
-
SSDEEP
12288:GZ9kzHtoeoE6xxsixL831CYsm283bezUXQf:GP4NoHEkxjLmv2830z
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\百度登录发博\百度登录发博.exe"C:\Users\Admin\AppData\Local\Temp\百度登录发博\百度登录发博.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx