Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
08-10-2024 05:59
General
-
Target
CR173Soft.exe
-
Size
3.4MB
-
MD5
09510c090c9d331a31c941e354aafde2
-
SHA1
e662fe84037834239f7467062c2b942f0734af2e
-
SHA256
393f28ac190095dfcebbfa5cf7d4ccbb05867722ebf1a506fb618905075f90d0
-
SHA512
9e44cb1138a5a77103fddb318783183c59c7a3e122f91da4ad8cfb194c9336b0c73a2eff053bf987f8320368a953a0e7e4925d556e87d196e0bfbf29be2ae2e6
-
SSDEEP
49152:t5CRSFR8lP35rGQyKrlQPRuFIAV3SLumiqIskYT8iWT1IAYeuS/gaANxyIxIQy0:tkpLrRFBV3SLusINre3R/NxyIxIQy0
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 64 IoCs
-
Suspicious use of SendNotifyMessage 64 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CR173Soft.exe"C:\Users\Admin\AppData\Local\Temp\CR173Soft.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
904KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
904KB
-
Filesize
3.4MB
-
Filesize
904KB