Analysis
-
max time kernel
93s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13-09-2024 20:47
General
-
Target
Wa0Desktop/Wa0Desktop.exe
-
Size
525KB
-
MD5
eac92247ece5e57d976c6951700c5c29
-
SHA1
ec34cdc7f1b60711e788b27f9195dbcac9944cd0
-
SHA256
1107b0d261e6ab09de3f2a8d4c4d9962c24f283fbe49bf8729678d6d23f6c5b7
-
SHA512
3531746634da6cacbed719cf8e6b0fd44741a74da0e3f7bbde5c06a56139db493195de42f6c585c52f4dffaadea0dee98afd716e0b748b784415975fc79f2715
-
SSDEEP
6144:+zFqcN1ybYbW4woDLFugjyp6FsGig4Rtwv/IP:dcLyydHDEgjyp5c4sv/0
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Control Panel 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Wa0Desktop\Wa0Desktop.exe"C:\Users\Admin\AppData\Local\Temp\Wa0Desktop\Wa0Desktop.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx