f815908e60e957c7b860e853730d809c0c10a061a220e43d2af9a0d6861b5596

Analysis

max time kernel
94s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03/08/2024, 01:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

314b83b6f4bb38a5ef7e7a3d3c0754d0N.exe
Size

99KB
MD5

314b83b6f4bb38a5ef7e7a3d3c0754d0
SHA1

c0a2a32d508e657640e37291b064685c5af1b722
SHA256

f815908e60e957c7b860e853730d809c0c10a061a220e43d2af9a0d6861b5596
SHA512

fe228a8c119c8a5218d073bf98e5e70e3ef4d22dbaf9fef147349a9e2f69a491c5d0da3ce4ddbaf572b6d14cfb99b2f5a871609e3e3afaabd730bdcb5391817f
SSDEEP

768:xGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyU:szqsQ5PIt4+/yfeB6r6YcOik5h36lX

Score

7^/10

discovery upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2964-0-0x0000000000400000-0x000000000041B000-memory.dmp	upx
behavioral2/files/0x00080000000234de-5.dat	upx
behavioral2/memory/2964-101-0x0000000000400000-0x000000000041B000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	314b83b6f4bb38a5ef7e7a3d3c0754d0N.exe

C:\Users\Admin\AppData\Local\Temp\314b83b6f4bb38a5ef7e7a3d3c0754d0N.exe
"C:\Users\Admin\AppData\Local\Temp\314b83b6f4bb38a5ef7e7a3d3c0754d0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2964

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\My Downloads\AikaQuest3Hentai Crack.exe

Filesize
99KB

MD5
267254265da2d585b32aa35b2260a95d

SHA1
c413113464decc110234a66a943bb8353adbdeba

SHA256
184d9ca549e34ecfd5c2adc8a966dd39fe40ad2b07636da50608aa1436dc5177

SHA512
e552218aaeec1eb7eba3af1b46adceba0959ae040b6fc7e3bc8436c70ce0040b5306c8a4d5c2f16332f3c819c96edd46c9458df90f716d16b2266de417ce921c

Download Submit
memory/2964-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2964-101-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download