Resubmissions

13/06/2025, 13:34

250613-qt7ynaam4s10

01/06/2025, 03:58

250601-ejqe3sbj713

Analysis

  • max time kernel
    148s
  • max time network
    139s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20250425-en
  • submitted
    01/06/2025, 03:58

General

  • Target
    FUPPGP Discord tool.exe
  • Size 117KB
  • Sample250601-ejqe3sbj71
  • SHA256 13e9042f6fa0c525b1cbe97d3273b1c0ae0b63e426ffaeec7caa3e11786141f2
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FUPPGP Discord tool.exe
    "C:\Users\Admin\AppData\Local\Temp\FUPPGP Discord tool.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:5664

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5664-0-0x0000000074D12000-0x0000000074D13000-memory.dmp

        memory/5664-1-0x0000000074D10000-0x00000000752C1000-memory.dmp

        memory/5664-2-0x0000000074D10000-0x00000000752C1000-memory.dmp

        memory/5664-3-0x0000000074D10000-0x00000000752C1000-memory.dmp

        memory/5664-4-0x0000000074D12000-0x0000000074D13000-memory.dmp

        memory/5664-5-0x0000000074D10000-0x00000000752C1000-memory.dmp

        memory/5664-6-0x0000000074D10000-0x00000000752C1000-memory.dmp

        memory/5664-7-0x0000000074D10000-0x00000000752C1000-memory.dmp