Analysis
-
max time kernel
81s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
29-08-2024 02:50
General
-
Target
MPParamEdit_F2.exe
-
Size
700KB
-
MD5
59a380bfaaa12a2138b00233ee3c74cd
-
SHA1
16ba58c1901a6fdb509cbd1798e289739764538f
-
SHA256
d5b7f8db9ccc12309ffce3fedd5a52dc5f71fca617f050e8bfd0e40f81b52e95
-
SHA512
e046bf1199d2915acf24bf9c0b22cb4175febb66b3f254d68d0f14a0cff3b38c778a58a8f8ad88a79048c9c4131973b103454a22eab47c9f0250975659a85f17
-
SSDEEP
12288:evBnij8TZyjUxnLDMVXXbFES7/VwA8cUCKWgvCgg+9AOYEPpU+:nHxxLHBgvnf7PD
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MPParamEdit_F2.exe"C:\Users\Admin\AppData\Local\Temp\MPParamEdit_F2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
716KB
-
Filesize
716KB