Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
25-09-2024 23:31
General
-
Target
DiscordIP_Puller.exe
-
Size
858KB
-
MD5
09893350bce547088d0786e8dd187e68
-
SHA1
0cf7701bee198c69265bcef41158cac36b2a77ef
-
SHA256
6a4bf0a4ba8d3bc2378a1965ecc6216effb2731ca2ba897147228474b59e208d
-
SHA512
b6ca519711cd1c10a8f3fb15b84d7a65799cbad8afa03601b4526751b8885045e25c473a32430e4028fb08a3fcf367f1b636e8a503c5a6108ff1e3a982af050b
-
SSDEEP
24576:vRt1P8oIPyBSn6TsUqpTSXxySn6LOG6srt:vZMPWSnvPsxrn6q2rt
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\DiscordIP_Puller.exe"C:\Users\Admin\AppData\Local\Temp\DiscordIP_Puller.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
880KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB