Analysis

  • max time kernel
    109s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08-09-2024 13:23

General

  • Target

    4f4161d61b9a1c4f0edeb2638e0f0ed0N.exe

  • Size

    7.1MB

  • MD5

    4f4161d61b9a1c4f0edeb2638e0f0ed0

  • SHA1

    98249e29ffe352ee5ef2558079991901db3d9664

  • SHA256

    b04f13fa49a6c851a9636e49ad74947b4d73a0e2c760d12ca979e92e3c5e67d7

  • SHA512

    e735e1c7e6f27d113316a54f5f2e2135f239c98d9745fadf85c302e8ca0a5033573c1db0dcf2962a65d5e04bb4f189cf24b00caf2ae3e3d0e35d1289dfecb951

  • SSDEEP

    98304:N/kQHjkHJxQINy9KPPb5HGxvwMTSgaqH0sYNDs0W9q8:N/XkpxQIY9KPwxZGDs0W9q8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4f4161d61b9a1c4f0edeb2638e0f0ed0N.exe
    "C:\Users\Admin\AppData\Local\Temp\4f4161d61b9a1c4f0edeb2638e0f0ed0N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2336-0-0x000000001E000000-0x000000001E264000-memory.dmp

    Filesize

    2.4MB

  • memory/2336-4-0x0000000010000000-0x00000000100C2000-memory.dmp

    Filesize

    776KB

  • memory/2336-7-0x000000001D170000-0x000000001D183000-memory.dmp

    Filesize

    76KB

  • memory/2336-10-0x000000001E7A0000-0x000000001E7BE000-memory.dmp

    Filesize

    120KB

  • memory/2336-14-0x000000001ECB0000-0x000000001ECBD000-memory.dmp

    Filesize

    52KB

  • memory/2336-18-0x000000001E8C0000-0x000000001E8DC000-memory.dmp

    Filesize

    112KB

  • memory/2336-33-0x0000000000280000-0x000000000028E000-memory.dmp

    Filesize

    56KB

  • memory/2336-29-0x000000001E9B0000-0x000000001E9B9000-memory.dmp

    Filesize

    36KB

  • memory/2336-26-0x000000001D1A0000-0x000000001D1B8000-memory.dmp

    Filesize

    96KB

  • memory/2336-22-0x000000001E7D0000-0x000000001E7DA000-memory.dmp

    Filesize

    40KB