Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19/09/2024, 07:10
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
crack/WWWFileSharePro.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
crack/WWWFileSharePro.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
wfspsetup.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
wfspsetup.exe
Resource
win10v2004-20240802-en
General
-
Target
crack/WWWFileSharePro.exe
-
Size
187KB
-
MD5
adeb908930d3afb4741d6de1095fecfa
-
SHA1
606768975f214083ebd118fbbcd7a15dafb11831
-
SHA256
6bb05b26e705ebfb0c35c4a11dd884317368e26e6180f8d74975b5c4d2008189
-
SHA512
9c30233545211c9a53a5734cc518451af986b80906683765938af8c601a44d9fe588c91b45f969b357eb8890616a19c7dcb7a3f77847b4803bb1f2336cabc22f
-
SSDEEP
3072:Vxp8s8TaAoszfG/ulZV54thbA4Tm8wVq2NCpZwvMifmy+KnEylzcToL:Vp8TaAostDChbnTm8w6wvMIz+qCS
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WWWFileSharePro.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1724 WWWFileSharePro.exe