Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-09-2024 18:17
General
-
Target
uhjjm.exe
-
Size
541KB
-
MD5
823898f7e0b12fa66b8e7ded74f4759d
-
SHA1
e83c37dc68f64947163d9f01662d1e1f933625e8
-
SHA256
6a0463a4bf0ce0f3fe157b70ad70f1b51ab7d1537fc135444bb010a9f3b65c57
-
SHA512
bc78342f793b5c7a93dbc08f1c8506500b1084c07593f946a1a72d017975fa96a7f9dc3190dd0212a44162261bcaf51772522cfb7d5d0a4282424565b3e73dfb
-
SSDEEP
6144:8w/pFWm4EcOpuF2tBWJHOOL4MSV/aq8nzIpBcbvbj/ZBneU1531uOXp:PpkmJYOP6zIpBc7X/ZBneU15Ft
Score
10/10
Malware Config
Signatures
-
Modifies visiblity of hidden/system files in Explorer 2 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\uhjjm.exe"C:\Users\Admin\AppData\Local\Temp\uhjjm.exe"1⤵
- Modifies visiblity of hidden/system files in Explorer
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx