Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-09-2024 06:12
General
-
Target
pkooit/WXDSRN.exe
-
Size
439KB
-
MD5
dc0da3a93abf27a4b8479b655a88b662
-
SHA1
dbbdf148a62b7032af35a3488f295226a04264ef
-
SHA256
3456fcfdfa1c52ef7c765e325a858e8a0281735b930d15c7986306f9425bf595
-
SHA512
66c742f350dfd111f27191973e175db379a4714152b3c6494e3420a15af2e7f770c9399c8a3eca79b4163a5ceae8c26c3263a2628031f60dc37d0069461c1868
-
SSDEEP
6144:mKQBGiA3eHJuwBZ4U/D3bnRKC5rsP/NHxbV9BLqrgqwWJM3yyG:YciRHQwv/D3bn75rY1HxbV9B2kvgYyyG
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pkooit\WXDSRN.exe"C:\Users\Admin\AppData\Local\Temp\pkooit\WXDSRN.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB