Analysis

  • max time kernel
    93s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-09-2024 05:00

General

  • Target

    2b6300ce632bfaf631e13e80dec03867c279e0691ca1f52e693af4029823c897N.exe

  • Size

    468KB

  • MD5

    1c87775c30c01bd423c753697d91d6d0

  • SHA1

    62f39db1cc16c71b7175c5fb3147393809ce81ab

  • SHA256

    2b6300ce632bfaf631e13e80dec03867c279e0691ca1f52e693af4029823c897

  • SHA512

    d12e5f8f671c87c0fd42710c827c4bbebaf7b99a9c92076296f15f6eb49a0b311b837fdad2990fec69d10be30fcb5ec93630fa9ac93b86390e675ad7d9fb3cc8

  • SSDEEP

    3072:ChotowbWf38UjbYCfz3sff5OCHbsID1rCHdjs4AQSc3FB/Nbhl8:ChGofsUjhfbsffuOo+QSyz/Nb

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b6300ce632bfaf631e13e80dec03867c279e0691ca1f52e693af4029823c897N.exe
    "C:\Users\Admin\AppData\Local\Temp\2b6300ce632bfaf631e13e80dec03867c279e0691ca1f52e693af4029823c897N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4852-0-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB

  • memory/4852-1-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB