Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-11-2024 09:07
General
-
Target
Bin1799/Client.exe
-
Size
6.4MB
-
MD5
3ea0814ab437a2774715a017289f32e7
-
SHA1
7de855de88853661570379bbc462cd0629a89d6e
-
SHA256
cf5fd9e1027a8d18fcd4b7a8ed2c2e9ff42649185bebf702d4dc85160a5af688
-
SHA512
5f2c95c6a6cb0660fc13652d463f736e8fe053740c6043015176d90d54be3a3462ad9bafcee25cb757da7aaba1cf23ff89f6ddb08b059bebc60f78bdf1f24f81
-
SSDEEP
98304:UiMF2kiCaBKBoB5gXngUD4ruTfUDFtE5LsnsQa45:UiaWKGBapD4ruT8DFtE5LsnsQR
Score
5/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bin1799\Client.exe"C:\Users\Admin\AppData\Local\Temp\Bin1799\Client.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
4KB
-
Filesize
236KB
-
Filesize
236KB