Analysis
-
max time kernel
109s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
29/03/2025, 17:23
General
-
Target
bin/NetKeeper.exe
-
Size
360KB
-
MD5
a2eab49d7096241f73f02fd1744bfd03
-
SHA1
90b92110d2e95dee283f25359ed4aefb4ccc0bac
-
SHA256
5ffdfa886e68852a6a7dc4cfab73a35043483d13ffa859662654100ad31a3c35
-
SHA512
2d30b178daec033f66588ad43b0abd4c0cb384173d7c056635ee19936f59bc3af3e9f7562f52160c363497239e77c57efcb8dae6c1f82d37bb453ce34fb16685
-
SSDEEP
6144:GdNv95/kQj2lsDO7kycUDvDOHkkiXu6n8g/29a99lBTNGt0wliDpG:Gbv95MM2WQkyFGHub8SEa9atnliDpG
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\NetKeeper.exe"C:\Users\Admin\AppData\Local\Temp\bin\NetKeeper.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx