Analysis
-
max time kernel
92s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05-08-2024 13:13
General
-
Target
2976-12-0x0000000000400000-0x000000000042F000-memory.exe
-
Size
188KB
-
MD5
8adf302b5d36bc4a7ac3c31792567c2d
-
SHA1
f9c4e5b865c776f324f3dfd166f013f3abc25a98
-
SHA256
f04a25b1a5e0cc5670455d1cf2511cefb4ecfda8af83570e781759ac3d5830bb
-
SHA512
41376a20a37a36e61740ccb90a689a6fd2541f2bc7740c06cf7b28a5cb85e3adad22c2c89af503e8d9d199c6e6a403a66e0c98cdaa7fdd251cd8a7a5e73ba8e9
-
SSDEEP
3072:XedD+E5yCLcV+8h3MMPH5xFqbQjoflqtbnJh7cwyIONjyKk:QtIrdMOhqbQjoo5JNcw/ON2K
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2976-12-0x0000000000400000-0x000000000042F000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2976-12-0x0000000000400000-0x000000000042F000-memory.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
3.3MB