Analysis
- max time kernel
141s - max time network
130s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
19/10/2024, 16:27
General
- Target 希望龙将辅助V1.10.exe
- Size 1.6MB
- Sample241019-tx7zlsxepp
- SHA256 e83e7836be434c12a11cc67f5516f25c7a6ff882fa813ab63320f1343ca317a9
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\希望龙将辅助V1.10.exe"C:\Users\Admin\AppData\Local\Temp\希望龙将辅助V1.10.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
e57af22.tmp
e57af23.tmp
e57af24.tmp
memory/3660-39-0x0000000000C60000-0x0000000000C61000-memory.dmp
memory/3660-38-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-36-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-44-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-78-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-69-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-51-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-40-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-41-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-92-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-90-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-88-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-87-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-85-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-80-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-81-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-75-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-73-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-68-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-63-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-64-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-61-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-59-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-56-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-54-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-48-0x0000000010000000-0x0000000010051000-memory.dmp
memory/3660-94-0x0000000000C60000-0x0000000000C61000-memory.dmp
memory/3660-93-0x0000000010000000-0x0000000010051000-memory.dmp