Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-10-2024 04:24
General
-
Target
svshost.exe
-
Size
12KB
-
MD5
07c569e7118817b8c94b336c01388c5d
-
SHA1
8e6bf401adc389ef8f97ba3023e3e18a0c34c2ea
-
SHA256
991a5e7b2f2cbee960e12a279b987a37b447972a88bfba98a976b7c0c0b0dc3d
-
SHA512
3554440ce9b26a86286082a14e1a43c2a4b973cbb7dd6f029cb1542691b6fea1fa0494583bcf8c0aa875faf333d420c3a14e917c37d6e306a0d9947e21f3ed56
-
SSDEEP
192:Yqh9KUAo8GDR+UI0dean5xnSUOHJgS0IWRmiEFputs:Yqh9Hr8G180dekvSp0xQiypis
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\svshost.exe"C:\Users\Admin\AppData\Local\Temp\svshost.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
-
Filesize
24KB