Analysis

  • max time kernel
    94s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/08/2024, 20:14

General

  • Target

    网文快捕/cyberarticle-4.361-cn.exe

  • Size

    5.0MB

  • MD5

    faeab589b0eaf2ccf7cf420a109b8338

  • SHA1

    85dddde2452e4efbaeda7e75d5c4d31bdad2d5bc

  • SHA256

    cb60b5e34168492132d49f2e2deaf2ed60dc25a9eae90b6b17e4945e1d24892c

  • SHA512

    fe222832b633d8b8d90faf9b40cfbf7b9e6a455c1de5183e15c0019c0f61ef2c58d5ba0aecc255d6e936401fdc2e33b668ebf123386360a24cf784c0f9bfb293

  • SSDEEP

    98304:v1eEk1dEXcq2Ohg2Bhvj0ciMUlja9cMRqCeJZmA7ZH34DzBB35hFeZ:9R2xq2Ohg2Bhb34qczZmkZXA5hwZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\网文快捕\cyberarticle-4.361-cn.exe
    "C:\Users\Admin\AppData\Local\Temp\网文快捕\cyberarticle-4.361-cn.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2416

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2416-2-0x0000000000401000-0x000000000040A000-memory.dmp

          Filesize

          36KB

        • memory/2416-0-0x0000000000400000-0x0000000000413000-memory.dmp

          Filesize

          76KB

        • memory/2416-3-0x0000000000400000-0x0000000000413000-memory.dmp

          Filesize

          76KB