Analysis

  • max time kernel
    147s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2024 06:02

General

  • Target

    17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe

  • Size

    483KB

  • MD5

    0a5ef4ce865711c55bbd9e3ba61bcd4f

  • SHA1

    af23d89a402faaf366a0374a24dcd5844b386d62

  • SHA256

    fc7beeae6b795561f216733b82611c8db1643cc883ded6fbca9c447c7a985358

  • SHA512

    f79a23f44518c1fb363264fa5bde787ba44d80bff1af7464f2f515ef9b45aa4774f13ae4dc5440fa15918db3c9224183a1b12d2731059dec1f2b85640f0f8030

  • SSDEEP

    12288:W5k+Yqaxrh3Nln+N52fIA4jbsvZzFVA4:gY9xrh3NDfIA4jOZx

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe
    "C:\Users\Admin\AppData\Local\Temp\17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2328

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\windir\ops.dat

    Filesize

    144B

    MD5

    00b2b05f5dd99fba246f29f111762e15

    SHA1

    4e5b311cb90a63461a747f37e512f881ae40e7ac

    SHA256

    afe35acf4ca0eafa8bf57e3a3b154bba014ade9659e2179b25e4bc85ec1b7875

    SHA512

    81354013e900f38bf19b5ffbc0b27287c90dfc7f732a6c63e4df032f1498e1394b04e8fba0c8fd4170b3a2fcb9ddf033f1ece7a670f917a0ea6c9086e6aa5f95