20cb81dee086f39aca1b60dcf082297b77ceae9979478d056da7324db9215f2a

Analysis

max time kernel
92s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 05:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$PLUGINSDIR/manager/scripts/WebBrowser_embedded.exe
Size

37KB
MD5

fc63714527aca09e610de9b4d820b558
SHA1

8f146589072c425bffa6aa3e95a0ef6e1d2b4300
SHA256

ba998650808297fb9e79fea57556776317ca6ea3af6c7cb68b57ef62907fbb9f
SHA512

b0f29bd0a31c0b91dc0350117425711edf3d5460aefc82dbe93a94de591be7eba5648f389c7c199dfd17ac72e83b9a057e933254c16629e1d74fef222935f278
SSDEEP

768:LDWdFYu0oycO631SC12iKyyqrsA5IOON1/3X:ixO6UC122BON1PX

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WebBrowser_embedded.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3472	WebBrowser_embedded.exe
3472	WebBrowser_embedded.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\manager\scripts\WebBrowser_embedded.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\manager\scripts\WebBrowser_embedded.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3472

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads