Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/08/2024, 14:16

General

  • Target

    $TEMP/4673551D-STFT12-4FE7-A218-48BDAE051E2B_std/UnloadModule.exe

  • Size

    40KB

  • MD5

    19f3563083f673bf46de1c11b0a4e80d

  • SHA1

    73c98e29a0a1a5724f7636db7b483518a8c9be4d

  • SHA256

    30b8ae584e837b32aac6a33f92b5f033e8e163be68605395912874ccf2c7b0af

  • SHA512

    f695e8c804394cb728953292dbc993d5a70845106b7a991a138230b4d484a86f186924c84bdc25d90279016ade6b75dab4febd9b7404649e34e2221db1b11171

  • SSDEEP

    384:6aY2oZgEAIPmQmGrubWLftv5UCX7ZQA4yw0BxZXAyJc:6aY28gN1QaMHVQA4J0PZLJc

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\4673551D-STFT12-4FE7-A218-48BDAE051E2B_std\UnloadModule.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\4673551D-STFT12-4FE7-A218-48BDAE051E2B_std\UnloadModule.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads