Analysis
-
max time kernel
120s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 03:01
General
-
Target
Trojan.Win32.CoreWarrior.DA.exe
-
Size
83KB
-
MD5
1e4abb6b0e58a2e33c59a430abd945d0
-
SHA1
776c8268d3825b1a5b984642e67f55cbb8890ea7
-
SHA256
b97afa37dee37b1166feac1983ab88f1a93c94eeea9173b1160aeb675cfbdedf
-
SHA512
02688b599f1378469a60f91c09f8f7c4692d546d57eb02d8fcd41adf0dc18c41fb4e1d7632cdef9af69684eba1528be007305352ea74aef3a30b4a5c98a5493e
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+OK:LJ0TAz6Mte4A+aaZx8EnCGVuO
Malware Config
Signatures
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.CoreWarrior.DA.exe"C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.CoreWarrior.DA.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD592fb122c038da0e4d5affc4ed2f87de9
SHA1b138e2f76287ea5235db41dceb3b8f1fe16bab33
SHA2561614b47cfda1859eaee567ba42f972d6c27ea38e6531549e496315412d9292f0
SHA5126b622f95cfead91ac1dac71639ff8b8efbd0139f28e861d6870c55b35c1adddafca3c23fe9eab43363431403a7391dcb92e044a33c51fc2e8eef319362b84d49
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB