Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    05-08-2024 19:15

General

  • Target

    c596b31ddb08a7563ff7de1545512030N.exe

  • Size

    702KB

  • MD5

    c596b31ddb08a7563ff7de1545512030

  • SHA1

    8cb916aa5ea8715e68ef2e49480f9d2cd9664feb

  • SHA256

    23933683ec9b416992ebf29bcd454f13e9340aec0b7a25eced6ba30a93b3c024

  • SHA512

    d82b24d6fbd78b9bafdb25db473e2212fb0652301fffedad94b6f862830d14217b7c84455dfc042a4e6b62c95a6e392a61b173d709946f9ed4389a1dd0d07288

  • SSDEEP

    12288:1SYFz/TTWRPelh8t14F4YfDY+o7KO68G2G9Ih40cjs31K6fq+hTR9PyuV5xFpQo:5FjORmlh8t0D+7y8G2G9yL0cMoThTR91

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c596b31ddb08a7563ff7de1545512030N.exe
    "C:\Users\Admin\AppData\Local\Temp\c596b31ddb08a7563ff7de1545512030N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2420-0-0x0000000000400000-0x00000000004B6000-memory.dmp

    Filesize

    728KB

  • memory/2420-1-0x00000000004C0000-0x0000000000527000-memory.dmp

    Filesize

    412KB

  • memory/2420-8-0x00000000004C0000-0x0000000000527000-memory.dmp

    Filesize

    412KB

  • memory/2420-11-0x0000000000400000-0x00000000004B6000-memory.dmp

    Filesize

    728KB