Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    22/03/2025, 06:15

General

  • Target

    b022d9e4ed0716b265fec7cac8a8b3d9.exe

  • Size

    9.5MB

  • MD5

    b022d9e4ed0716b265fec7cac8a8b3d9

  • SHA1

    06186c33e890e938a38ab244e2b5a5a96cbe03ab

  • SHA256

    213700faddee1ca46428597c9011cf189a5c5ce20b4fbf7cdc5cb047d37f3cbe

  • SHA512

    92a0c2404ddec21b10884b963d9ca012c971b2b736004563c3fbdfa097ad5bec4de050f3f4b3781e98a836c8a07840d2ab74cb70ad4b986b8c51cc2df81b2e02

  • SSDEEP

    1536:5+2CEf8o9ppJ96zWkMzppJY6zWk3KEKclR:jCEf8sppX6zJippm6zJ3KLYR

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b022d9e4ed0716b265fec7cac8a8b3d9.exe
    "C:\Users\Admin\AppData\Local\Temp\b022d9e4ed0716b265fec7cac8a8b3d9.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2008-0-0x000000007411E000-0x000000007411F000-memory.dmp

    Filesize

    4KB

  • memory/2008-1-0x0000000000D60000-0x00000000016EC000-memory.dmp

    Filesize

    9.5MB

  • memory/2008-2-0x0000000074110000-0x00000000747FE000-memory.dmp

    Filesize

    6.9MB

  • memory/2008-3-0x000000007411E000-0x000000007411F000-memory.dmp

    Filesize

    4KB

  • memory/2008-4-0x0000000074110000-0x00000000747FE000-memory.dmp

    Filesize

    6.9MB