Analysis
-
max time kernel
153s -
max time network
22s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
20-10-2024 20:18
General
-
Target
bin/NetKeeper.exe
-
Size
84KB
-
MD5
f11792e12c4ffbc7181bf4b8dcaf9a9a
-
SHA1
dbdf47c39ebae3cd0b333c37474c1403afe86e57
-
SHA256
64ba93259b857f1db2e6437700d01d5fb8176a0c14a808692a252f8e6ab00b72
-
SHA512
7e22f1fda1d489210cd9f0c6e05e596fd66c4384c5ae27a63d71a9c8563599527623d33603b3e0be2a3756be3afd5372bbea9b834a454ad570db59ce423bbb1e
-
SSDEEP
1536:F6XrlgON4gNOR8sdkJI6Z5NLaqY6Dv50zM36XRcLPKxUfVGENOqKlxThZQ92T:F6bJlcRlkJIU5cIv5V6XwPKxIgENOqQ5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\NetKeeper.exe"C:\Users\Admin\AppData\Local\Temp\bin\NetKeeper.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
412KB
-
Filesize
1000KB
-
Filesize
412KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB