Analysis

  • max time kernel
    138s
  • max time network
    111s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-07-2024 11:08

General

  • Target

    чит/Protocrasher.exe

  • Size

    39KB

  • MD5

    02f8247cada6e42ed3bd473b5e471f18

  • SHA1

    5800faff2f52f004595831a8da13051affcdf75f

  • SHA256

    fc1407976518aa767cbac6c83381d3657bc7dbb9b16c8dbae485a5d378c91019

  • SHA512

    239606b881907e426844b5a81c4aa871a95313657e0cd23a1cf82892993aab93210ad4434bd0c6c17d5543b19b4fcf9a17262d5fb7fa9e6b6c3465adf1c6236f

  • SSDEEP

    384:EpvWVnsDYRWB0QP56GdyrLBlesjdCr4PM2xlDGqXgAtglz6KzdmRVckwatw3jnuv:Zff86KwRVckwljnuB6cVU72gyh69Ps

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\чит\Protocrasher.exe
    "C:\Users\Admin\AppData\Local\Temp\чит\Protocrasher.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2352-0-0x0000000074D7E000-0x0000000074D7F000-memory.dmp

    Filesize

    4KB

  • memory/2352-1-0x0000000000E90000-0x0000000000EA0000-memory.dmp

    Filesize

    64KB

  • memory/2352-2-0x0000000005D30000-0x00000000062D4000-memory.dmp

    Filesize

    5.6MB

  • memory/2352-3-0x0000000005880000-0x0000000005912000-memory.dmp

    Filesize

    584KB

  • memory/2352-4-0x0000000005820000-0x000000000582A000-memory.dmp

    Filesize

    40KB

  • memory/2352-5-0x00000000063F0000-0x00000000063FA000-memory.dmp

    Filesize

    40KB

  • memory/2352-6-0x0000000006420000-0x0000000006434000-memory.dmp

    Filesize

    80KB

  • memory/2352-7-0x0000000074D70000-0x0000000075520000-memory.dmp

    Filesize

    7.7MB

  • memory/2352-8-0x0000000074D70000-0x0000000075520000-memory.dmp

    Filesize

    7.7MB

  • memory/2352-9-0x0000000074D7E000-0x0000000074D7F000-memory.dmp

    Filesize

    4KB

  • memory/2352-10-0x0000000074D70000-0x0000000075520000-memory.dmp

    Filesize

    7.7MB