Overview
overview
3Static
static
3Trojan-X- Scanner.exe
windows7-x64
3Trojan-X- Scanner.exe
windows10-2004-x64
3MSCOMCTL.dll
windows7-x64
3MSCOMCTL.dll
windows10-2004-x64
3MSVBVM60.dll
windows7-x64
3MSVBVM60.dll
windows10-2004-x64
3MSWINSCK.dll
windows7-x64
3MSWINSCK.dll
windows10-2004-x64
3Subnet2.exe
windows7-x64
3Subnet2.exe
windows10-2004-x64
3Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
17-10-2024 19:04
Static task
static1
Behavioral task
behavioral1
Sample
Trojan-X- Scanner.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Trojan-X- Scanner.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MSCOMCTL.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
MSCOMCTL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
MSVBVM60.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
MSVBVM60.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
MSWINSCK.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
MSWINSCK.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Subnet2.exe
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Subnet2.exe
Resource
win10v2004-20241007-en
General
-
Target
Trojan-X- Scanner.exe
-
Size
48KB
-
MD5
efb9abcbe9575d7a3ffaa64019aab728
-
SHA1
e60d06358ca64089197c090ae7c8702c763a32f7
-
SHA256
dc3ecf600cc682b6b6c450edce18adc5b9294c1b94e092a59b81824be380b918
-
SHA512
c45187ef4f41af34bc64bfb990ad082a6c77dd1686afa9024500c12a91863fd003a9313608283c3efe60bc4439b7f423ff8f1dc958eb73f86ca6f3db7c8e1917
-
SSDEEP
768:mp1RkkrPmzAZ38M+Zd0l4e+xwHePSZNv4/YJWD62H0SS+WmaVVgfKsNYneRPSWkM:m9mcmp6xHeEYYJWD62H0SSTmaVVgfKsn
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Trojan-X- Scanner.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2104 Trojan-X- Scanner.exe