Resubmissions

28-08-2024 22:02

240828-1x98aszhnk 10

27-08-2024 12:22

240827-pjyrkazgmh 10

Analysis

  • max time kernel
    135s
  • max time network
    145s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    28-08-2024 22:02

General

  • Target

    data/appInfo/services/wget.exe

  • Size

    4.9MB

  • MD5

    8c04808e4ba12cb793cf661fbbf6c2a0

  • SHA1

    bdfdb50c5f251628c332042f85e8dd8cf5f650e3

  • SHA256

    a7b656fb7a45f8980784b90b40f4a14d035b9dc15616465a341043736ec53272

  • SHA512

    9619f96c3180ef3d738ecc1f5df7508c3ff8904021065665c8388a484648e135105e1c1585de1577c8b158f9b5bc241e3ff7f92665e9553e846e1b750ddea20f

  • SSDEEP

    98304:bHObnQdOb3OWEqNHeHq6PdOnS8SOGdVilQeHPpXF0aGOVxuGqYE6hpAl/70pzd+Z:bHInQ5WE2HeHq61OJSOGdVilQeHPpXFA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\data\appInfo\services\wget.exe
    "C:\Users\Admin\AppData\Local\Temp\data\appInfo\services\wget.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4392-0-0x0000000000400000-0x00000000008F2000-memory.dmp

    Filesize

    4.9MB