Analysis

  • max time kernel
    93s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-09-2024 04:16

General

  • Target

    WinKawakss.exe

  • Size

    2.4MB

  • MD5

    fde6b77a11eb4a48ddb9f1b06518c8e8

  • SHA1

    5a75fdf0a2dd583b9894afef451eac04e41c92d9

  • SHA256

    59943a945355107e9e279787028da715c2859c224bc870e2c9c63fa278b39939

  • SHA512

    5f8d2bf35c438aa9dd5f52be0687a78e003807ec8b251f3968230d4282bef0bca169d6d2bee6a452166a11b05c12a1f41d8326eed575dee0fd874465c3364e4a

  • SSDEEP

    24576:9AOITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQiSH5REzwD813MzcmHby7q:9VwrkVLbL1frdCYR7SbHYmHG5Cp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WinKawakss.exe
    "C:\Users\Admin\AppData\Local\Temp\WinKawakss.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3360-0-0x0000000000880000-0x0000000000BC7000-memory.dmp

    Filesize

    3.3MB

  • memory/3360-1-0x0000000000880000-0x0000000000BC7000-memory.dmp

    Filesize

    3.3MB