Analysis
-
max time kernel
138s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11-08-2024 17:27
General
-
Target
Crack/ADC.exe
-
Size
991KB
-
MD5
5fc4ca08e81fb5db4a7d1018baf30a80
-
SHA1
b3b2720d57f2223e14547a615e406305066500b3
-
SHA256
c254c7b427607bdd37c13ef0226a4ba4e03b39fb3ea30f887ccbd1b3139680d3
-
SHA512
985bd9f60cb8a96a51df4ed9f32d2340c011dd12bb2f312bb636f76450ed930c954946264d095748dc0f708fe714d5452f92f023a7d403c2708988cce253b581
-
SSDEEP
24576:lxp2LF+Sx0p0teUwiIYwtvts4q+jYQAv0f1:lH2LFH0p0zIYcFdRAv
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crack\ADC.exe"C:\Users\Admin\AppData\Local\Temp\Crack\ADC.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\pcaui.exe"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {b819901d-8577-4d1e-8c99-e6953298d611} -a "Active Desktop Calendar" -v "Xemi Computers" -s "This app can't run because it causes security or performance issues on Windows. A new version may be available. Check with your software provider for an updated version that runs on this version of Windows." -n 1 -f 0 -k 0 -e "C:\Users\Admin\AppData\Local\Temp\Crack\ADC.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB