Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/09/2024, 05:19
General
-
Target
bingyu528/tools/TCP.exe
-
Size
319KB
-
MD5
cd096c24dc2aa10cc004022c4fd04e82
-
SHA1
eeb6b8558771cbecae9b615fce9b3f1cd3969d97
-
SHA256
ad8fbbcc1df10d9fa49f5b44181514fec1a65c2b136dfb695da7a0564c110259
-
SHA512
7d4f1609b66d33fc4131d231ad006bf1fbc77e8e19fa145f611de08706dd388f0e843c44aa1c0e7f376bee7574ef6aa9578fbd5d30a48efa0528d822d44ea60a
-
SSDEEP
3072:CBsLwdtuTqVKzDMvUSoLuP1vx49DqQ+oZ0boeIMlBNrEyLy5Mo4F+72xQhzUGTqa:lwdkTqgZqNJyj+Nb7rcj4AuQhb
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bingyu528\tools\TCP.exe"C:\Users\Admin\AppData\Local\Temp\bingyu528\tools\TCP.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
-
Filesize
320KB