Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03-09-2024 20:16

General

  • Target

    03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe

  • Size

    9.0MB

  • MD5

    f330076e07318dea7fc883faf95958d6

  • SHA1

    287b25d41e273d60b86098d2dd7b0f55e4918179

  • SHA256

    03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3

  • SHA512

    dab4e8f37ead922f2a5d14f731defb01aa2d24662687c18c45421a72bed149d0be869856b0a4a826cfcd77039707ab616c5ec87cb596a21e22027c16d707957b

  • SSDEEP

    98304:3TsaTTJfMhCWNRP5W1fN7mr6grrBN9WV693E82y/2KDmLhrxB3oQZU04ncjD1MfV:33VuP5W1y6Stz931XmHBHHrF6ZW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe
    "C:\Users\Admin\AppData\Local\Temp\03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2112-50-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2112-63-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/2112-61-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/2112-60-0x00000000003C0000-0x00000000003C1000-memory.dmp

    Filesize

    4KB

  • memory/2112-58-0x00000000003C0000-0x00000000003C1000-memory.dmp

    Filesize

    4KB

  • memory/2112-56-0x00000000003C0000-0x00000000003C1000-memory.dmp

    Filesize

    4KB

  • memory/2112-55-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2112-53-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2112-51-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2112-48-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2112-46-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2112-45-0x00000000005DC000-0x0000000000AC8000-memory.dmp

    Filesize

    4.9MB

  • memory/2112-44-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/2112-42-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/2112-40-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/2112-39-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/2112-37-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/2112-35-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/2112-34-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2112-32-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2112-30-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2112-29-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/2112-27-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/2112-87-0x0000000000400000-0x00000000013C9000-memory.dmp

    Filesize

    15.8MB

  • memory/2112-25-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/2112-24-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/2112-22-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/2112-20-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/2112-19-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2112-17-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2112-15-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2112-14-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/2112-12-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/2112-10-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/2112-9-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/2112-7-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/2112-5-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/2112-4-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/2112-2-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/2112-0-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/2112-88-0x00000000005DC000-0x0000000000AC8000-memory.dmp

    Filesize

    4.9MB