Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
-
submitted
29/03/2025, 17:23
General
-
Target
bin/NetKeeper.exe
-
Size
84KB
-
MD5
f11792e12c4ffbc7181bf4b8dcaf9a9a
-
SHA1
dbdf47c39ebae3cd0b333c37474c1403afe86e57
-
SHA256
64ba93259b857f1db2e6437700d01d5fb8176a0c14a808692a252f8e6ab00b72
-
SHA512
7e22f1fda1d489210cd9f0c6e05e596fd66c4384c5ae27a63d71a9c8563599527623d33603b3e0be2a3756be3afd5372bbea9b834a454ad570db59ce423bbb1e
-
SSDEEP
1536:F6XrlgON4gNOR8sdkJI6Z5NLaqY6Dv50zM36XRcLPKxUfVGENOqKlxThZQ92T:F6bJlcRlkJIU5cIv5V6XwPKxIgENOqQ5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\NetKeeper.exe"C:\Users\Admin\AppData\Local\Temp\bin\NetKeeper.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx