3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23-01-2025 11:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe
Size

486KB
MD5

2133b0b0143b0cc0d5608d572495b24f
SHA1

3e71cc4dc61a0b12aca4902029fd841fda4e8a51
SHA256

3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d
SHA512

9614c168f988a86165aa5ce78655ebd2d61471238ed073bd9b9115f0324abc6fa88e379df66e0e2b5c0ccd0bdf00d30d3a52785cdf148bed4bb398d4746bf396
SSDEEP

12288:R13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZBEvS2:Dak/mBXTV/R0nEF76gFZ+vL

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1284	3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe

C:\Users\Admin\AppData\Local\Temp\3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe
"C:\Users\Admin\AppData\Local\Temp\3d7843a45d4e6c29db0ff3640adadc01a73eba0ffc41c0f932cd16439f0bca4d.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1284

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\chromedriver\logs.dat

Filesize
144B

MD5
6a79bb8ac7d18e96f5b210f24265d550

SHA1
1440fcda3803ee7d033f42e24c301fb09a378ceb

SHA256
bcf0d5a431a9f16836c05fef9b7ff319c2ba23c1cc39c867907001779cb59715

SHA512
03405cb27218e9ad99895da9ba87ae1a12d26b94909ba5f3b54b05f92389eb1aea34739b150f0fc4e81f99687c524321ce150541ff749537274a5a1adaee9aef

Download Submit