Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23-09-2024 13:43
General
-
Target
4016-4-0x0000000000400000-0x000000000042F000-memory.exe
-
Size
188KB
-
MD5
4e3308dd35d01bec27835ea704ad2add
-
SHA1
72b21d6a4fb0a10059bcf77faea4cbf7e372905e
-
SHA256
7cca32fad7c7128e5e567f10f9472871cb7e7bfc35b95e6b8d1390a2462fc7ea
-
SHA512
6c591dbd5a73b100c7a2951687153d1c465bba8afc50136c9f28a66cdd32879161f0b2d2f0d6d8cff065b980a8aa07f248b3f5211d3a36d322d4e478f8d84822
-
SSDEEP
3072:KaNnFrHShnGoc/TiRPwNhRDUb1DGSa2swDBlfbet5puifn4:VBSW+Ro3SbVGSa2JD3zet5puiP
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4016-4-0x0000000000400000-0x000000000042F000-memory.exe"C:\Users\Admin\AppData\Local\Temp\4016-4-0x0000000000400000-0x000000000042F000-memory.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
3.3MB