Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
17/10/2024, 14:53
General
-
Target
3d6156500960078079101b26c273fc3ce64be915f402c24c6ff29fd8a632f06b.exe
-
Size
13.5MB
-
MD5
4a8196d515b2cf85eca7b131930d60b8
-
SHA1
b845c73ef5effc3b7704409ee9ad2f12d4bbf04e
-
SHA256
3d6156500960078079101b26c273fc3ce64be915f402c24c6ff29fd8a632f06b
-
SHA512
34cd04f48c6befc0988d4c4319d1358bc191e636a84d9691ed5e4647577ef0999a10a953f7dbb7adcadf7fc26af888523749ec4dc299e13a0419493899234a80
-
SSDEEP
196608:FMFxPqOHlio2bSU7wafgmyEJ4VT5TXcgO6lsy2+9jvKYUpXLNWLp4MrszC+4Rga:FwlioU9SFTO6oQUFLNqp4Sj+eg
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d6156500960078079101b26c273fc3ce64be915f402c24c6ff29fd8a632f06b.exe"C:\Users\Admin\AppData\Local\Temp\3d6156500960078079101b26c273fc3ce64be915f402c24c6ff29fd8a632f06b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
24.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
24.3MB
-
Filesize
7.3MB
-
Filesize
1.7MB
-
Filesize
24.3MB
-
Filesize
1.7MB
-
Filesize
24.3MB
-
Filesize
24.3MB
-
Filesize
1.7MB