a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/11/2024, 22:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec.exe
Size 7.9MB
Sample241109-2vffkstgra
SHA256 a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec
MD5 fbcb2cba7e5a97f3120f3e804ffd3d49
SHA1 de69d90f0f8c35b3931c22ff60b1ca2d0f7921a9
SHA512 15d0d8f5f001498d5e6987a5c493560e2a407677881c84d2583c36b4cd1c5157000f994b454394acc10ca1d289d1086530421fdf3834d280770669750e89e76b
SSDEEP 98304:w4NxK/6sZTj2Ry2fPAWyjNTEY9xFUkcVwNSHfbv/kOIhThw6Q1f+hl/hjY4+iafv:w4m2INTx9Pe20/zkOiu1f+79YR
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3432	a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec.exe

C:\Users\Admin\AppData\Local\Temp\a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec.exe
"C:\Users\Admin\AppData\Local\Temp\a7abdab748ca7d90fe583ac57590b4b13334e98dfae8e49c1f3215f578cbbfec.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3432

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 e8449062f58a076761a8a055e44d7dd8155b5710a5d9dc3b3bc851e360a28b43
MD5 5bc4c42320242ac6b5fb2e4b146c7975
SHA1 c1d003330011de944fe343972212d43534536464
SHA512 7fe21b3858a53c88c31a83a258cc09e6ba2495f428a9a08cfa3636e1a3bc748f2d7510a6e995f22ef73f37d1811847750be96e600a378ed2fecd80df2c863536
MD5 SHA1 SHA512

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 357630134fedf4b2337cdcbbf18f0a5ea8aa585ab41f7fa3fe4a5cfc98cbd677
MD5 13bdb07a779e85e469465c55a967003a
SHA1 0593bd5a478b81f849768c3b69e0e4dd2d5d8c4a
SHA512 161f85810aa3496132c67abb33216fcaf133783ccf48f2a420200705a5b12dc56577bacc936bffa839fecf8cff128a5cc49bd304e7fb02ae2fd26a17b4940f73
SSDEEP 96:tzXeSfH+TMTBTfHzHU0HHohgbT2YWPHADHnLHqWDHRFHMWVHDYHhVH6TH34HQEHu:tteoFL6WJF
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 90258d5483ca404d5efa14927f9b20756dee1c09bd59cbf94ad3883cbf9f2951
MD5 14fc823655d9ef67b7a49af39e316305
SHA1 459c4990e73e3085277ccc87fe17bc560cb08e60
SHA512 b8cd471922f740a5b211583bba491553763aa43b52d8c5a562129fac3a1eea66c19b14a5d2b72deae4882329b7ea3e1b2b89a783a9acf76e9ac7a137e01535c1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads