Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-08-2024 21:40

General

  • Target

    VwMeter/VwUpdate.exe

  • Size

    278KB

  • MD5

    bff83d7bd87ae8e5426035b0c67affff

  • SHA1

    f868e80eae976dbda4f6e432e317986509057a13

  • SHA256

    24c625b3e0d41ac66006e047a9caf66bd5d7e4f36b487df3f12018ec8fc6fca1

  • SHA512

    1c8239caa14e0df5a86480f17cdab0b06933b784426984478f9968420cfea6813e7d603644f598bb7f04f08bc37d9e044754132e1f2a65d9a35fe9200017fcdc

  • SSDEEP

    6144:+O6UM3aCW3e0dZfFgCZTdsmnElPV1Z4F6TQAI5d/Grernu:CUAI1dTdxGmnOPV1y6T5V

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VwMeter\VwUpdate.exe
    "C:\Users\Admin\AppData\Local\Temp\VwMeter\VwUpdate.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2156-0-0x0000000000400000-0x0000000000484000-memory.dmp

    Filesize

    528KB

  • memory/2156-1-0x0000000002330000-0x000000000237B000-memory.dmp

    Filesize

    300KB

  • memory/2156-9-0x0000000002A90000-0x0000000002A91000-memory.dmp

    Filesize

    4KB

  • memory/2156-10-0x0000000000B20000-0x0000000000B21000-memory.dmp

    Filesize

    4KB

  • memory/2156-8-0x0000000000B10000-0x0000000000B11000-memory.dmp

    Filesize

    4KB

  • memory/2156-7-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB

  • memory/2156-6-0x0000000000B00000-0x0000000000B01000-memory.dmp

    Filesize

    4KB

  • memory/2156-11-0x0000000002A80000-0x0000000002A82000-memory.dmp

    Filesize

    8KB

  • memory/2156-5-0x0000000002480000-0x0000000002481000-memory.dmp

    Filesize

    4KB

  • memory/2156-4-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/2156-3-0x00000000024A0000-0x00000000024A1000-memory.dmp

    Filesize

    4KB

  • memory/2156-2-0x0000000002320000-0x0000000002321000-memory.dmp

    Filesize

    4KB

  • memory/2156-13-0x0000000002560000-0x0000000002561000-memory.dmp

    Filesize

    4KB

  • memory/2156-12-0x0000000002530000-0x0000000002531000-memory.dmp

    Filesize

    4KB

  • memory/2156-28-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2156-27-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2156-26-0x0000000002A70000-0x0000000002A72000-memory.dmp

    Filesize

    8KB

  • memory/2156-25-0x0000000002550000-0x0000000002551000-memory.dmp

    Filesize

    4KB

  • memory/2156-24-0x00000000025D0000-0x00000000025D1000-memory.dmp

    Filesize

    4KB

  • memory/2156-23-0x00000000025C0000-0x00000000025C1000-memory.dmp

    Filesize

    4KB

  • memory/2156-22-0x00000000025B0000-0x00000000025B1000-memory.dmp

    Filesize

    4KB

  • memory/2156-21-0x00000000025F0000-0x00000000025F1000-memory.dmp

    Filesize

    4KB

  • memory/2156-20-0x00000000025A0000-0x00000000025A1000-memory.dmp

    Filesize

    4KB

  • memory/2156-19-0x00000000025E0000-0x00000000025E1000-memory.dmp

    Filesize

    4KB

  • memory/2156-18-0x0000000002500000-0x0000000002501000-memory.dmp

    Filesize

    4KB

  • memory/2156-17-0x0000000002540000-0x0000000002541000-memory.dmp

    Filesize

    4KB

  • memory/2156-16-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/2156-15-0x0000000002570000-0x0000000002571000-memory.dmp

    Filesize

    4KB

  • memory/2156-14-0x00000000024E0000-0x00000000024E1000-memory.dmp

    Filesize

    4KB

  • memory/2156-29-0x0000000000400000-0x0000000000484000-memory.dmp

    Filesize

    528KB

  • memory/2156-30-0x0000000002330000-0x000000000237B000-memory.dmp

    Filesize

    300KB