Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-09-2024 19:21

General

  • Target

    1c041653979dd77f51bf6c02f0bf36c6df1956899e433624308b491416aba65a.exe

  • Size

    468KB

  • MD5

    117c43dcbb7fca0659b8bf09b2455c2d

  • SHA1

    8246fde0e366fe4bfb86b2ab39505c81351f9535

  • SHA256

    1c041653979dd77f51bf6c02f0bf36c6df1956899e433624308b491416aba65a

  • SHA512

    991e9900a70413844594a12728ffec13cbaf35054f1153d6e3d1d579ac92f2bfde765ba4a9f244b85e7d1f44d07bafe2964d5505c8b0b789da74857b979daa48

  • SSDEEP

    3072:txoyog+dJ08j2bYkPzbjFf8/ECxjtIpknmHBXVy9zkf3PtKB1FlZ:txho75j23PXjFfk0JgzkfVKB1

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1c041653979dd77f51bf6c02f0bf36c6df1956899e433624308b491416aba65a.exe
    "C:\Users\Admin\AppData\Local\Temp\1c041653979dd77f51bf6c02f0bf36c6df1956899e433624308b491416aba65a.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4912-0-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB

  • memory/4912-1-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB