Analysis
-
max time kernel
37s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-09-2024 21:06
General
-
Target
kk.exe
-
Size
3.1MB
-
MD5
6728b74d5b30d2db8436f0c9f64684f1
-
SHA1
6920cf39875fb1be1a01471c3041ece615ee4e4e
-
SHA256
479e3ef28d3c70b110ff993086e4518f4a5a6fb8285b530350ad2bcd6d0bb192
-
SHA512
395ceb96e09d68f8313aa9a2f6f4429c2bc5c7d713e3ad6dee8f805a8f8e5954c49e9cbb4fe1f469be3c080c2d545f4f0596ac3a0db5e69aed2bdb18b0fa68f3
-
SSDEEP
98304:CAm9JxmAATbh8TdW9bS3j0Q3o7Qr1VS/UMPXSE6f2Q/80f:CuywqXY7Qr1VS/ZPX2/d
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\kk.exe"C:\Users\Admin\AppData\Local\Temp\kk.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵