Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 22:56

General

  • Target

    62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe

  • Size

    487KB

  • MD5

    16b3be4e45df4b40fe9f23652d884390

  • SHA1

    4ebca80c00e5c46fe414d8f733c55dcfb6b534a8

  • SHA256

    62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59

  • SHA512

    e1f5182db779dbfebea7ceaf5980781eaeaa9c4bed9b98e55392d3477c52488ff3dc7375196b3e5fc437cb69b3a0b5258b8492a667dd30c8794da9c56f687b31

  • SSDEEP

    12288:vuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZtLA+DYY:S09AfNIEYsunZvZ19Zms3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe
    "C:\Users\Admin\AppData\Local\Temp\62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\rochilds\logs.dat

    Filesize

    144B

    MD5

    1dda0a0e2a753cd5b1feceb8970bc340

    SHA1

    0c8ecb83b3b810051b8b139ed7f249e0d265bee2

    SHA256

    27be532836688fc7f0c3ee9352dfa29f55041eaae338f9bb7c2499de3f0d5b48

    SHA512

    b7ec790f9e663f30bf6769d4f8f2b1cdd19dd1253c266964baa36b8cb40e5ba3e89af376f6f31b16cde0d11a56e7a3afe8dae5e3a8cb1a3036279ea74b9c13d9