3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23-01-2025 11:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe
Size

486KB
MD5

2133b0b0143b0cc0d5608d572495b24f
SHA1

3e71cc4dc61a0b12aca4902029fd841fda4e8a51
SHA256

3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d
SHA512

9614c168f988a86165aa5ce78655ebd2d61471238ed073bd9b9115f0324abc6fa88e379df66e0e2b5c0ccd0bdf00d30d3a52785cdf148bed4bb398d4746bf396
SSDEEP

12288:R13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZBEvS2:Dak/mBXTV/R0nEF76gFZ+vL

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3144	3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe

C:\Users\Admin\AppData\Local\Temp\3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe
"C:\Users\Admin\AppData\Local\Temp\3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3144

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\chromedriver\logs.dat

Filesize
144B

MD5
af4e1988728f31d559cc6c9771844a46

SHA1
961a8af6852b21c230a7a39dfc4ed7cedbbbd3fc

SHA256
06c23562b1e9f3fab9fa4ceaba4864f86f2bd1f0c43bc56f623f10b1e18ff5ce

SHA512
c66e7acb035ac8b7f7953c0496aa867bae0fd47c1f8292da86cb77833196ca489de2c10d897c9713a7ae21fc92edebe4abc21d6a1eb4473ab3a9c07e2add91cd

Download Submit