Analysis

  • max time kernel
    1s
  • max time network
    5s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11-08-2024 18:28

General

  • Target

    Black Mesa Monitor Screensaver.scr

  • Size

    3.2MB

  • MD5

    91cce0d13104f694fcb110df259189fc

  • SHA1

    5d663ce4b6d877abbb937897a3bf00b933d815e9

  • SHA256

    932b803b498308d97782847fc00c6f54dfacc847aaf24ffb658064f3622994fd

  • SHA512

    af9d8e7a0b4825e516196e4b8d9c510b71d8cc8663c9280b7db413e1193440c1bb7b5faa5de41850cfe2299b09526e3eaae1f086f7e1f15113daa23b31f20eea

  • SSDEEP

    49152:Qmw3yG9cgKVTKpyutixv2zQOmt2wSTMGz2aUz4HbMBmhnujt/1obbz0:QmKFgutbRmoAGiaTHbCm9i/1obbz

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Black Mesa Monitor Screensaver.scr
    "C:\Users\Admin\AppData\Local\Temp\Black Mesa Monitor Screensaver.scr" /S
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2056-0-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB

  • memory/2056-1-0x0000000003010000-0x00000000031E9000-memory.dmp

    Filesize

    1.8MB

  • memory/2056-7-0x0000000003010000-0x00000000031E9000-memory.dmp

    Filesize

    1.8MB

  • memory/2056-12-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB

  • memory/2056-13-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB

  • memory/2056-16-0x00000000003E0000-0x0000000000400000-memory.dmp

    Filesize

    128KB

  • memory/2056-15-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB

  • memory/2056-20-0x0000000003010000-0x00000000031E9000-memory.dmp

    Filesize

    1.8MB

  • memory/2056-17-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB

  • memory/2056-19-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB

  • memory/2056-23-0x0000000003010000-0x00000000031E9000-memory.dmp

    Filesize

    1.8MB

  • memory/2056-25-0x0000000003010000-0x00000000031E9000-memory.dmp

    Filesize

    1.8MB

  • memory/2056-27-0x0000000000400000-0x0000000000A2B000-memory.dmp

    Filesize

    6.2MB