Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19/11/2024, 13:05
General
-
Target
ccec2e3829d0e993f55bfebb6452141960b2644d68c883353aeb6d8ad20fc377.exe
-
Size
4.7MB
-
MD5
8e8b5927c023c6c04689c94f3b96269b
-
SHA1
b813a20e93a07953e326c09bb8effdb8b232dca7
-
SHA256
ccec2e3829d0e993f55bfebb6452141960b2644d68c883353aeb6d8ad20fc377
-
SHA512
efdedef8f6902224cc90a38d1727112dddba80dc40dbe45cd9154274377e2d0b6d087d998e8aee6b34e566081c7e1e2080c104888aeb041635a4102764e52e60
-
SSDEEP
98304:BRKXJYFJd+RCubsZDDVNDX+7Muoqf7IkKqakl1YI8MHvGT:BRL/4IkslfDX3AD9jtuI8sve
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ccec2e3829d0e993f55bfebb6452141960b2644d68c883353aeb6d8ad20fc377.exe"C:\Users\Admin\AppData\Local\Temp\ccec2e3829d0e993f55bfebb6452141960b2644d68c883353aeb6d8ad20fc377.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.0MB
-
Filesize
284KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
8.0MB