Analysis

  • max time kernel
    439s
  • max time network
    441s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14-09-2024 12:50

General

  • Target

    Solarae/MAC_Address_Changer.exe

  • Size

    220KB

  • MD5

    84a13840d26c98581a024f61aad1c1ec

  • SHA1

    dee67f068322c1928809ce6b425e146fc4b082c6

  • SHA256

    4b90308e3752921ab125cfb9dad7e1b310e242d13a278981557b3a15e0c58521

  • SHA512

    5afd7faff289b79b568fd5cac9e6dae2f7b09589d5039ee392788772d1896a995707d8a8dcc0595fe38bb48776a3fea50d562e6f7f2548078345c519bc5555d2

  • SSDEEP

    3072:0dpxThxUTAzHiGox/C0wdvMqLD2T/ZSU0M5anf3eL/5pKCud1SjnIitjVfo:0d9xdLjosFUqLD277taveAvSjto

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Solarae\MAC_Address_Changer.exe
    "C:\Users\Admin\AppData\Local\Temp\Solarae\MAC_Address_Changer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1212-0-0x00000000746FE000-0x00000000746FF000-memory.dmp

    Filesize

    4KB

  • memory/1212-1-0x0000000000F80000-0x0000000000FBC000-memory.dmp

    Filesize

    240KB

  • memory/1212-2-0x0000000006030000-0x00000000065D6000-memory.dmp

    Filesize

    5.6MB

  • memory/1212-3-0x0000000005A80000-0x0000000005B12000-memory.dmp

    Filesize

    584KB

  • memory/1212-4-0x0000000005B20000-0x0000000005B2A000-memory.dmp

    Filesize

    40KB

  • memory/1212-5-0x00000000746F0000-0x0000000074EA1000-memory.dmp

    Filesize

    7.7MB

  • memory/1212-6-0x00000000086A0000-0x0000000008706000-memory.dmp

    Filesize

    408KB

  • memory/1212-7-0x00000000746FE000-0x00000000746FF000-memory.dmp

    Filesize

    4KB

  • memory/1212-8-0x00000000746F0000-0x0000000074EA1000-memory.dmp

    Filesize

    7.7MB