Analysis

  • max time kernel
    31s
  • max time network
    43s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-10-2024 14:55

Errors

Reason
Machine shutdown

General

  • Target

    Invoice Copy--SS21-22185.exe

  • Size

    735KB

  • MD5

    de14a9a68222535e7607d779bd765693

  • SHA1

    c5f7c6c381f94412c615c653b3d32fc0ff214c6c

  • SHA256

    403bb6e9dc90881b21455b962d27a1ccf555585645eb648ad3b29f94d9265aa5

  • SHA512

    9260891716b6f48bb1b2a9625ffff02b277e912630f876e110f8820153ecbd34eab8278b2d96d3e3837c185695b76b5ea35b7975face69aaed7d7bbaa846d575

  • SSDEEP

    12288:G+G82iNeHK7z8EzZ1q2hsKZQrwcflkNA7MqGzeejAZ2a/IGRUdZ4xCmrx/D:d1b/Phs2xcdwFq0ee62aAGRUX4xCCD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Invoice Copy--SS21-22185.exe
    "C:\Users\Admin\AppData\Local\Temp\Invoice Copy--SS21-22185.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4376-0-0x000000007521E000-0x000000007521F000-memory.dmp

    Filesize

    4KB

  • memory/4376-1-0x0000000000D50000-0x0000000000E0E000-memory.dmp

    Filesize

    760KB

  • memory/4376-2-0x0000000005820000-0x00000000058BC000-memory.dmp

    Filesize

    624KB

  • memory/4376-3-0x0000000005E70000-0x0000000006414000-memory.dmp

    Filesize

    5.6MB

  • memory/4376-4-0x00000000058C0000-0x0000000005952000-memory.dmp

    Filesize

    584KB

  • memory/4376-5-0x00000000057F0000-0x00000000057FA000-memory.dmp

    Filesize

    40KB

  • memory/4376-6-0x0000000075210000-0x00000000759C0000-memory.dmp

    Filesize

    7.7MB

  • memory/4376-7-0x0000000005B70000-0x0000000005BC6000-memory.dmp

    Filesize

    344KB

  • memory/4376-8-0x0000000008920000-0x0000000008936000-memory.dmp

    Filesize

    88KB

  • memory/4376-9-0x000000007521E000-0x000000007521F000-memory.dmp

    Filesize

    4KB

  • memory/4376-10-0x0000000075210000-0x00000000759C0000-memory.dmp

    Filesize

    7.7MB