Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
09-08-2024 11:30
General
-
Target
De4dot [Modded ArmDot]/AssemblyServer-CLR40.exe
-
Size
5KB
-
MD5
ebc64535f7781c84c07b4abf21015f43
-
SHA1
b40e8b32b6e21324b1c95b299a7ceb9e119d56e4
-
SHA256
eaa825861da74e551fcecb253a1e6dd6ded5f87a8df9490a687e655ffdf9f301
-
SHA512
33b170905f951ec96c83538a1e5ebba5694f883a3b90318df60fcf703f5e707ecfb5db7a4f6e8af5f7340ae0fc99e642362c7f2d85c2238626f722cd4a0f09be
-
SSDEEP
48:6wAFdJYL4jZqMztPtF7GrlvdT/KKsMSACVCGpfbNtm:fqJ7jZ5t77unvnYUIzNt
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\De4dot [Modded ArmDot]\AssemblyServer-CLR40.exe"C:\Users\Admin\AppData\Local\Temp\De4dot [Modded ArmDot]\AssemblyServer-CLR40.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
88KB