Analysis
-
max time kernel
138s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 09:05
General
-
Target
Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/KPortScan3.exe
-
Size
191KB
-
MD5
c0a8af17a2912a08a20d65fe85191c28
-
SHA1
0fbc897bf6046718524d05b6bc144c3785224802
-
SHA256
080c6108c3bd0f8a43d5647db36dc434032842339f0ba38ad1ff62f72999c4e5
-
SHA512
bd6b67a2f285a5634c5d38f742d5528a661414d3fb88f8065433f6a6a1a3a3f707dede9be7bda9bac9327240422c2314081d0a9eb9b6bc61687465ac96868ef9
-
SSDEEP
3072:ywYXnaz7fOTkQTwokTqLIOt6r+9dEPlUIbrMOFTfM0OZhEt3hjOrX7a0K2gY7fq2:N+naz7OTkNPTqLIOt6r+9dEPlUIbrMOE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Tools\rdp\RDP Forcer 1.5\KPortScan 3.0\KPortScan 3.0\KPortScan3.exe"C:\Users\Admin\AppData\Local\Temp\Tools\rdp\RDP Forcer 1.5\KPortScan 3.0\KPortScan 3.0\KPortScan3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx