Analysis

  • max time kernel
    104s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250313-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250313-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/04/2025, 03:17

General

  • Target

    306be0e543d45b3e299754c6ae38563eb94bd68c0df6679f22f9e74bf6a3c223.exe

  • Size

    1.8MB

  • MD5

    3173cf08113cf78b42333b7eb6111998

  • SHA1

    793840a5d25b229ef55f23a65a6b4d90e92ebb06

  • SHA256

    306be0e543d45b3e299754c6ae38563eb94bd68c0df6679f22f9e74bf6a3c223

  • SHA512

    a0310ed04cb04aad1bd7bb685e3b1640485022ef989f31a5a825b912a2145d125543d0dd13e54a57766d6c8df805e668d7943089c301ef9770fc567a102e283f

  • SSDEEP

    24576:2gMcVer5ynhYYWuxl6XKOzQ0JBXB5kmS7NY16prlyMNiBllFeDas/gNqRNt8A0Ms:mcVI5ynhMO67JBXBXSJDiBnsbj3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\306be0e543d45b3e299754c6ae38563eb94bd68c0df6679f22f9e74bf6a3c223.exe
    "C:\Users\Admin\AppData\Local\Temp\306be0e543d45b3e299754c6ae38563eb94bd68c0df6679f22f9e74bf6a3c223.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads