Overview
overview
8Static
static
7Win11DeathEdition.exe
windows11-21h2-x64
8Windows 11...er.exe
windows11-21h2-x64
7Windows 11...lp.chm
windows11-21h2-x64
1Windows 11...on.cmd
windows11-21h2-x64
1Windows 11...gm.exe
windows11-21h2-x64
3Windows 11...pe.vbs
windows11-21h2-x64
3Windows 11...br.exe
windows11-21h2-x64
6Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
05-09-2024 01:16
Behavioral task
behavioral1
Sample
Win11DeathEdition.exe
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Windows 11 Death Edition Source Code/Bat To Exe Converter/Bat_To_Exe_Converter.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Windows 11 Death Edition Source Code/Bat To Exe Converter/help.chm
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Windows 11 Death Edition Source Code/Win11DeathEdition.cmd
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Windows 11 Death Edition Source Code/bgm.exe
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
Windows 11 Death Edition Source Code/escape.vbs
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Windows 11 Death Edition Source Code/mbr.exe
Resource
win11-20240802-en
General
-
Target
Windows 11 Death Edition Source Code/Bat To Exe Converter/Bat_To_Exe_Converter.exe
-
Size
444KB
-
MD5
76d5900a4adf4c1f2ab8dbfd0a450c4a
-
SHA1
6177a27416519564ecb5d38093d61c9a81d3c290
-
SHA256
7adc1f7ff040628a600f99465bd70e71ad83fecfe60b0f1dadc84b5d262ff350
-
SHA512
286b05ff09d4e85856c251d56902486738d9b2457d9a56ea8a449195b349f2718816099f4602efba88dad592dd6cecefcd0748382888c3026dd585b3e46f0c6e
-
SSDEEP
12288:iYicHMPMDp8WrZtzlqQMB/FS/CiUF7RAfoSBjF:viuMPMDp8mtzbMFFS/CzKF
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4292-0-0x0000000000400000-0x00000000004FA000-memory.dmp upx behavioral2/memory/4292-5-0x0000000000400000-0x00000000004FA000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Bat_To_Exe_Converter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Windows 11 Death Edition Source Code\Bat To Exe Converter\Bat_To_Exe_Converter.exe"C:\Users\Admin\AppData\Local\Temp\Windows 11 Death Edition Source Code\Bat To Exe Converter\Bat_To_Exe_Converter.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4292