Analysis
-
max time kernel
136s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29-08-2024 05:55
General
-
Target
1580-70-0x0000000000400000-0x000000000042F000-memory.exe
-
Size
188KB
-
MD5
596f0e0213d9d209b0b3e074e50f3f23
-
SHA1
5c2d60d78865319fe72940eb9f420bf794badaad
-
SHA256
a6f2de0d9f631d29a1bbd66ebd37b965e4b6524642130f4a1d5ba9015d481e62
-
SHA512
28112c347669d6d2bde8dc6e50c572c64bc85a5350f285201f0a4914b2020021778df7e04258d102ae534800b0e214f9f870bded17e37fc1f492822681723efc
-
SSDEEP
3072:rgQh5FrIuKQHxrp6g4txp/3ic6dyeXO8tE5AFSQbJigINju:zkufx4tX/L6dye+8SAFg
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1580-70-0x0000000000400000-0x000000000042F000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1580-70-0x0000000000400000-0x000000000042F000-memory.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
3.3MB