Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
-
submitted
25/09/2024, 06:15
General
-
Target
qsycjk/Զ̿.exe
-
Size
1.4MB
-
MD5
51e12a919c134d2c585c20bcdd79a35f
-
SHA1
f40f7e65ba83661d0f113fd5f658db17261519b1
-
SHA256
685c3717eb53108ef34c2db9012ed1478a2fc99eb9ccc515a4e94aa76db66012
-
SHA512
27b0ab0bc9a3bb35095549940e6ccc03a785527a6e4a87011972bf12513229c843dfd566ed1e2c74059ba35112e2a2dbf21a63ec850a69c33f7230acb966bbfc
-
SSDEEP
24576:LMT1XbBs84+4QVb8hmCPTvkTrtT4sN3hZhdv25EJJTrvP5giz2GyZ:YT1B2+j8ECAlT9NxfdCLiz2n
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\qsycjk\Զ̿.exe"C:\Users\Admin\AppData\Local\Temp\qsycjk\Զ̿.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
492KB
-
Filesize
492KB