Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/09/2024, 13:38

General

  • Target

    ea48a334f963530108356e8398c1dd6f9eb66ec7a22be9dac2a114022a00d5d4.exe

  • Size

    2.8MB

  • MD5

    d4c16f052f838bc8521c6befa504ece1

  • SHA1

    23abd08f304754750804b02d2af63d3688494304

  • SHA256

    ea48a334f963530108356e8398c1dd6f9eb66ec7a22be9dac2a114022a00d5d4

  • SHA512

    39f97eb3ca32aa0e7a6d730b314bdf812d54db3d728aa4bb2b310ca91ad04b0c0ddb092f2bc1fa3dfae0fb571a3087ebb960e80695f41b57c19725c504c01c37

  • SSDEEP

    49152:c6zLvKg9KlG41cvCP+KCRhKRlXGsH9z7Bqfsp4+atRL/6+s8KuqGaX0ToIBAUZLI:1fyg9KlG41MCPhCRUh9HWB+atJBJBAUO

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ea48a334f963530108356e8398c1dd6f9eb66ec7a22be9dac2a114022a00d5d4.exe
    "C:\Users\Admin\AppData\Local\Temp\ea48a334f963530108356e8398c1dd6f9eb66ec7a22be9dac2a114022a00d5d4.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2776

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2776-2-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-1-0x0000000074F20000-0x0000000074F21000-memory.dmp

          Filesize

          4KB

        • memory/2776-3-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-4-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-5-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-6-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-9-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-8-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-7-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-18-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-19-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-20-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-21-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-22-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-23-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-27-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-26-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-25-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-24-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-28-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-29-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-31-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-30-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-32-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-34-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-33-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-36-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-35-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-37-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-38-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-39-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-41-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-40-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-42-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-43-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-44-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-45-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-49-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-51-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-50-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-52-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-53-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-56-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-57-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-55-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-54-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-58-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-59-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-61-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-62-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-60-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-63-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-65-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-67-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-66-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-64-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-68-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-76-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-75-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-74-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-73-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-72-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-71-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-70-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-69-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-77-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-79-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-81-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-80-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-78-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-82-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-85-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-84-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-83-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-86-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-87-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-91-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-90-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-92-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-93-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-94-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-95-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-97-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-96-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-98-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-100-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-99-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-101-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-102-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-103-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-104-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-105-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-106-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-107-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-108-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-109-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-113-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-112-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-111-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-110-0x0000000074F00000-0x0000000074FF0000-memory.dmp

          Filesize

          960KB

        • memory/2776-128-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-129-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-130-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-131-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB

        • memory/2776-132-0x0000000000400000-0x000000000071D000-memory.dmp

          Filesize

          3.1MB