Analysis

  • max time kernel
    96s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-09-2024 07:14

General

  • Target

    f9adcab870384292ae5f69bdcca6f800N.exe

  • Size

    328KB

  • MD5

    f9adcab870384292ae5f69bdcca6f800

  • SHA1

    aa5db758543362b4d9bee3ce8431044ae38c1196

  • SHA256

    47de0ec6e8dc1a31f9606e484c79dd7152cd481346753cf05190217ec4276367

  • SHA512

    e230c771560afa41ea7e2c6cdf61218518a62055a4a8e2db1450e15f06fae83f586894e7348e69b78da3eb006116305fc77fa91ee121821006a2ee40aed26791

  • SSDEEP

    6144:R722XUbjAolZpbRDLxEzOUPmgc81KAwfrCXDzdk7:R7DKX7ptEbmg7vYCzzdk

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f9adcab870384292ae5f69bdcca6f800N.exe
    "C:\Users\Admin\AppData\Local\Temp\f9adcab870384292ae5f69bdcca6f800N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:1508

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1508-1-0x0000000000CC0000-0x0000000000DC0000-memory.dmp

    Filesize

    1024KB

  • memory/1508-2-0x0000000004F10000-0x000000000525A000-memory.dmp

    Filesize

    3.3MB