Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
04/10/2024, 08:17
General
-
Target
ThermaltakeUpdate.exe
-
Size
153KB
-
MD5
16ad653943c03f0f9f80c8f53bcd4115
-
SHA1
8a4c20628bbe55d35eaa6dbc978b511a687f6de5
-
SHA256
65b596aefb62c6989460beb72ffd9d6ced683aa83e4f3d7594c18c49dcacd47a
-
SHA512
055360d69ceb569d8612fcd7d35914477978edd590ccee1f9d16f1d9f04fa05a430a615dbf9d350b1e15d1b825f67121f15a48d9451addd3d26437659f26dbf8
-
SSDEEP
1536:kLbYN/borxXz0dtVV/LyjoiyLIoCoeje9omIahSUc/CGpY6ghT:kLibQxQ3/IM0foeje9omIahSUcFYv
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ThermaltakeUpdate.exe"C:\Users\Admin\AppData\Local\Temp\ThermaltakeUpdate.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx