Analysis

  • max time kernel
    94s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/09/2024, 23:28

General

  • Target

    Shut Down Expert/SDECmd.exe

  • Size

    119KB

  • MD5

    6cc79939138a07e43bcc614a6ba3e8e9

  • SHA1

    eb5c9973f2cad3412c3490fb0c07e32d4e936e47

  • SHA256

    c1e11906125c25e58153b9f115f4d6b5435bf9f0f7050ca77f9fc002211da366

  • SHA512

    25b50b399d9d6b1e5ed9926504cbfffd45f3aa72cd7dd4aaf634769444c07cb312cd427bf09e82f37432b3d262df472256f7ffafd19bbd94cb6f3c7254cbe82a

  • SSDEEP

    3072:U4GePurpDaokNgnKdDgkbCwe2gqrGkIlxbHCGQ7ojR:jPudggnVwEZHE

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Shut Down Expert\SDECmd.exe
    "C:\Users\Admin\AppData\Local\Temp\Shut Down Expert\SDECmd.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2700-0-0x0000000000580000-0x0000000000581000-memory.dmp

    Filesize

    4KB

  • memory/2700-1-0x0000000000400000-0x0000000000423000-memory.dmp

    Filesize

    140KB