Analysis
-
max time kernel
148s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-11-2024 09:20
General
-
Target
Bin1799/Plugins/PcLock.exe
-
Size
573KB
-
MD5
91f6d17d7ba629cbfd949c26b6d15982
-
SHA1
aa16a91fd32d634560adf8242353b545de8ba8b4
-
SHA256
1bdbb2927c50e99ab1f61930d80e46afb3b77ccd1c30d3f95342e75650159295
-
SHA512
a02476aea31393e8aefef61732e60c37568bebaa614414d928bdcfff2f2f29a09f485267c9bc4e5a8aa4b7b8f31262bf8629bb9da89d1c19c596e3d400d31d08
-
SSDEEP
12288:sX5isPFzLIv1MokGAf0ka3H7HSR8wEwux:A8stlGAf+H7HKEx
Score
5/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bin1799\Plugins\PcLock.exe"C:\Users\Admin\AppData\Local\Temp\Bin1799\Plugins\PcLock.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
1.2MB