Analysis
-
max time kernel
140s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24/08/2024, 23:18
General
-
Target
asBook.exe
-
Size
488KB
-
MD5
da99af1cccbb7bc6d1eec8d42ac248e5
-
SHA1
25d54b72fb1bd8ad1fa9f48cf64669e39088a897
-
SHA256
4c4ff5c27affb18ed576fcaba392acb61280a7eae191796844cc0fb3f55cd8ae
-
SHA512
34c5d09d5cd4c3c450d448bc45b9410d3ac75e59c9bd974c00a38515707eb39dd5bc655c77eb112d7b9e17eb00b1717f3fd791ec17dacd5aa688689448fa0797
-
SSDEEP
12288:uYWhUzFUjXDNvqFRqTGvfKyK+Q0nU77bNo1apGb+1kim:uYGUpUjzNiRqTwfDTU/Ro1aQ6e
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\asBook.exe"C:\Users\Admin\AppData\Local\Temp\asBook.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
228B
MD595ddb83f47a1b1704e60299a3a64b69f
SHA188af6ca6681addfa80334bb646823be50e3a9646
SHA25616039376fafaae03f5fcf19d0c68634a836b41eb788c8bbac75512df5e32242e
SHA5126588c0790b256012c7633f1bcd3453934bba87eb51b47e815228d758f5191d2914326c8c8fc42c73c53162991e7ff699d180ad1b88bc5e7da3ce2919e3faa851
-
Filesize
1.3MB
-
Filesize
8KB
-
Filesize
432KB
-
Filesize
8KB
-
Filesize
1.3MB