Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-09-2024 09:27

General

  • Target

    qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/asco.exe

  • Size

    122KB

  • MD5

    f84869bedfe85e155fd4e904f14a91a2

  • SHA1

    7b101002470c4b126313ffae3ed12e620aa4fdb1

  • SHA256

    fe9295021c7bfac71f7f42a12a2fb51ff5d5d4770c43e644dd4190c35b168d8e

  • SHA512

    0070c84ecd6021b4fb70ca935f4e90135346b499aefd6d2596bc20c333c9e24b8c44e73507c0f3879087ae07a4ab3f85d65a921b2274e5b9fa567e7bb29f798e

  • SSDEEP

    1536:R5Xs1I0qv9n+7c0KeEzUOZ4COeNrYcFuSxQ7tS19XqHkqkOPF2WaDv6:/s1Pqv90KLzUOgynJ19abkIZaD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\qucs-0.0.19-win32-mingw482-asco-freehdl-adms\bin\asco.exe
    "C:\Users\Admin\AppData\Local\Temp\qucs-0.0.19-win32-mingw482-asco-freehdl-adms\bin\asco.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4584-0-0x0000000000401000-0x0000000000417000-memory.dmp

    Filesize

    88KB

  • memory/4584-2-0x0000000000400000-0x0000000000774000-memory.dmp

    Filesize

    3.5MB

  • memory/4584-3-0x0000000000400000-0x0000000000774000-memory.dmp

    Filesize

    3.5MB