Analysis
- max time kernel
137s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
16/08/2024, 16:19
General
- Target BrutoForce Seed v12.6.1.exe
- Size 132.0MB
- Sample240816-tsw2jsvakb
- SHA256 baf1ff994d4398644013cc69f2c24a1c0c5c39813e5e509997606d3ca0e3a6ac
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\BrutoForce Seed v12.6.1.exe"C:\Users\Admin\AppData\Local\Temp\BrutoForce Seed v12.6.1.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3172-0-0x00000000071D0000-0x0000000007B59000-memory.dmp
memory/3172-7-0x0000000006BC0000-0x0000000006BF5000-memory.dmp
memory/3172-14-0x0000000006CC0000-0x0000000006D74000-memory.dmp
memory/3172-16-0x0000000008760000-0x0000000009349000-memory.dmp
memory/3172-15-0x0000000000BE4000-0x0000000000BE5000-memory.dmp
memory/3172-11-0x0000000006CC0000-0x0000000006D74000-memory.dmp
memory/3172-10-0x0000000006BC0000-0x0000000006BF5000-memory.dmp
memory/3172-4-0x0000000000400000-0x00000000004EC000-memory.dmp
memory/3172-3-0x00000000071D0000-0x0000000007B59000-memory.dmp
memory/3172-64-0x0000000006C00000-0x0000000006C1E000-memory.dmp
memory/3172-63-0x0000000006C30000-0x0000000006C42000-memory.dmp
memory/3172-60-0x0000000006C30000-0x0000000006C42000-memory.dmp
memory/3172-59-0x0000000006BB0000-0x0000000006BB9000-memory.dmp
memory/3172-56-0x0000000006BB0000-0x0000000006BB9000-memory.dmp
memory/3172-55-0x0000000006AE0000-0x0000000006AE6000-memory.dmp
memory/3172-52-0x0000000006AE0000-0x0000000006AE6000-memory.dmp
memory/3172-51-0x0000000006B50000-0x0000000006B65000-memory.dmp
memory/3172-48-0x0000000006B50000-0x0000000006B65000-memory.dmp
memory/3172-47-0x0000000006B20000-0x0000000006B42000-memory.dmp
memory/3172-44-0x0000000006B20000-0x0000000006B42000-memory.dmp
memory/3172-43-0x0000000006B00000-0x0000000006B15000-memory.dmp
memory/3172-40-0x0000000006B00000-0x0000000006B15000-memory.dmp
memory/3172-39-0x0000000006A00000-0x0000000006A1F000-memory.dmp
memory/3172-36-0x0000000006A00000-0x0000000006A1F000-memory.dmp
memory/3172-35-0x0000000006A20000-0x0000000006A2C000-memory.dmp
memory/3172-32-0x0000000006A20000-0x0000000006A2C000-memory.dmp
memory/3172-31-0x0000000006A50000-0x0000000006A61000-memory.dmp
memory/3172-28-0x0000000006A50000-0x0000000006A61000-memory.dmp
memory/3172-27-0x0000000006A90000-0x0000000006ACA000-memory.dmp
memory/3172-24-0x0000000006A90000-0x0000000006ACA000-memory.dmp
memory/3172-23-0x0000000006A30000-0x0000000006A4D000-memory.dmp
memory/3172-20-0x0000000006A30000-0x0000000006A4D000-memory.dmp