Analysis

  • max time kernel
    94s
  • max time network
    119s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2024, 22:59

General

  • Target

    2e0afdcf4ee4384a164bf6790666dcd08ee630585ecfe963f15ad3b72b226831N.exe

  • Size

    8KB

  • MD5

    359747e0fcad97b1413c5b0db9297f00

  • SHA1

    57a3579f9a56327f8c5b649791b01d002ef63274

  • SHA256

    2e0afdcf4ee4384a164bf6790666dcd08ee630585ecfe963f15ad3b72b226831

  • SHA512

    b94aa8afb8e9c46d7521108b845173ecc1305445a8794d97426820bd8c23f184ca9d34624366230520aa29a1f5bd3bbaa998718a592643a350cab06fe2b607a5

  • SSDEEP

    192:e/9W0GjCrYSInx6wxaV5qMOTHeIudGfnlMt:i9W0GjCwczqMOTHUcfnlM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e0afdcf4ee4384a164bf6790666dcd08ee630585ecfe963f15ad3b72b226831N.exe
    "C:\Users\Admin\AppData\Local\Temp\2e0afdcf4ee4384a164bf6790666dcd08ee630585ecfe963f15ad3b72b226831N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3244

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3244-0-0x0000000074CCE000-0x0000000074CCF000-memory.dmp

    Filesize

    4KB

  • memory/3244-1-0x00000000002F0000-0x00000000002F8000-memory.dmp

    Filesize

    32KB

  • memory/3244-2-0x0000000005120000-0x00000000056C4000-memory.dmp

    Filesize

    5.6MB

  • memory/3244-3-0x0000000004C10000-0x0000000004CA2000-memory.dmp

    Filesize

    584KB

  • memory/3244-4-0x0000000074CC0000-0x0000000075470000-memory.dmp

    Filesize

    7.7MB

  • memory/3244-5-0x0000000004BC0000-0x0000000004BCA000-memory.dmp

    Filesize

    40KB

  • memory/3244-6-0x0000000074CCE000-0x0000000074CCF000-memory.dmp

    Filesize

    4KB

  • memory/3244-7-0x0000000074CC0000-0x0000000075470000-memory.dmp

    Filesize

    7.7MB