Analysis

  • max time kernel
    141s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27-09-2024 10:19

General

  • Target

    先登仓库管理系统3.0/数据库安装/先登物资管理系统(数据库安装)3.0.exe

  • Size

    820KB

  • MD5

    8415b28920bb507d997dd8e9a5642c23

  • SHA1

    b5f4053b5dca7f0c373a90a1a3a624cc359f2a16

  • SHA256

    b5f956d574715c980a152b858e582957791785f22d7222ce8a3e4dd4c1393fb3

  • SHA512

    3b12a92dece846855ebb886898666d20f4551c7deff2c1218f9f218d757cd4a5a472f9f4f9e19e630c68e0cb614a2c8184435ad685e6a89999032ba0c1424f0d

  • SSDEEP

    24576:UXjzj/6Ck+XdDyhxuZMiGHXHpNAOG5aZGWKWNFPP3O:Urdkwd2UMiGHXHDAJaZDK8FPG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\先登仓库管理系统3.0\数据库安装\先登物资管理系统(数据库安装)3.0.exe
    "C:\Users\Admin\AppData\Local\Temp\先登仓库管理系统3.0\数据库安装\先登物资管理系统(数据库安装)3.0.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1856-0-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/1856-2-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/1856-1-0x0000000000400000-0x00000000008F6000-memory.dmp

    Filesize

    5.0MB