Analysis

  • max time kernel
    115s
  • max time network
    182s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-01-2025 17:40

General

  • Target

    2024-12-25/unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe

  • Size

    2.9MB

  • MD5

    f7d5d4e29c1d36be102f456c38c1a510

  • SHA1

    38bbb90c46d80248207f743d42c8c035017db8a9

  • SHA256

    ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66

  • SHA512

    92652ce1fdaad522acf33b55845b7613ababf53f4a87bdf2eb9a96e56f502841dc82ab157cebe86240e51a602303187f32f1a47f5eedd9023e106d16265fb7a6

  • SSDEEP

    49152:AbXP+XotFI2y6tIjn9Nq8l6NRZemtFO/9cSdT21T:AbXP+Y7I2y6Ojn9n6NTe+FO/9cR

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads