Analysis
-
max time kernel
59s -
max time network
61s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05-09-2024 12:03
General
-
Target
Crypto-Wallets-Scanner-V1.0.5/Crypto_Wallets_Scanner.exe
-
Size
220KB
-
MD5
c222b31a42ef8801355a1c6b271a1b16
-
SHA1
7ec99b3abaa189f05f93d7fc6ee40507b2d3177a
-
SHA256
92b5e826d98f6cb1ee8990267819bfe7abc59db62ce861798bf2d8b56217727c
-
SHA512
4a94b219e0c6648c9edc089b1f565af16d8805a4154477392d5235d1b94b8c52a7adaba0c7f8e758a78fd82b59f816484516cca76c9fb6c92f1e79bfeeca9d03
-
SSDEEP
1536:znVIfBSI6p9nnn4XXXhXUPyHDPtvaF6pHnnn4XXXhXUPrHDPvvvl:znVIfBSI68H7w6bH7N
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crypto-Wallets-Scanner-V1.0.5\Crypto_Wallets_Scanner.exe"C:\Users\Admin\AppData\Local\Temp\Crypto-Wallets-Scanner-V1.0.5\Crypto_Wallets_Scanner.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
240KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
192KB