Analysis
-
max time kernel
110s -
max time network
92s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 06:02
General
-
Target
Trojan.Win32.CoreWarrior.DA.exe
-
Size
83KB
-
MD5
c5fd88a407660a898f66d31242b2f3e0
-
SHA1
95d26d8309e6e3f3cb5b64fc00685d8253324361
-
SHA256
dd5d9bb24ef7657c4fc1a22b383e09f301d8fcbfe87203244c6e56dbae71d0dc
-
SHA512
aefc1cc66675d283168848822766a5e3efda15005f7763e5ed9385369ab64858c5e05d15b2dda516291ece1a6d134b83ff0a99122161751c1835bc170ff6415a
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+YK:LJ0TAz6Mte4A+aaZx8EnCGVuY
Malware Config
Signatures
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.CoreWarrior.DA.exe"C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.CoreWarrior.DA.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5058c6d0638c58bf738b2739e3c9a25a7
SHA123fd89a5dd96ba9eb2cf4ed9cb671eda53f2e234
SHA256e63f63c5650f56828d44140c4ac1a4e0fb0110c188ba1b5a00ba6c61e79ddcc7
SHA5127a3108818d62227522bd65908f9123d6cfcfba45836c8879138a7b447c2993b6e1327c5c705759947627f0f430631d9812c6661ec602d6e5541e5415bd0deaa6
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB