Analysis

  • max time kernel
    140s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 07:22

General

  • Target

    Easy_Time_Control.exe

  • Size

    1.6MB

  • MD5

    56bb8533f20ab27505616b1a2e19d3d4

  • SHA1

    1653a2bd569f8dc78a069b58de1e90634cdf9a2a

  • SHA256

    5ce7fa7b49b7843659e13f7e5522d147c9f1fe4093196d9a71069bc62dceb882

  • SHA512

    d90b05dd77f30626c097ee6441f874e49f68631ae9905b7730c0c72fec1dedad6975cb85113b959c1034131704f8f58410df1c8c1bc19959c30b22059e4003cd

  • SSDEEP

    49152:SPbBu73M+bFf9T8EYhwxNSVd6DimBZcOU7m6GNpL/H:SBuDM+b26S+QOU7g/H

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Easy_Time_Control.exe
    "C:\Users\Admin\AppData\Local\Temp\Easy_Time_Control.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1928-0-0x0000000000400000-0x000000000085D000-memory.dmp

    Filesize

    4.4MB

  • memory/1928-1-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1928-9-0x0000000002080000-0x00000000020E0000-memory.dmp

    Filesize

    384KB

  • memory/1928-8-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-7-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-6-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/1928-5-0x0000000000A60000-0x0000000000A61000-memory.dmp

    Filesize

    4KB

  • memory/1928-4-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-3-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/1928-2-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1928-24-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-23-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-22-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-21-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-39-0x0000000002050000-0x0000000002051000-memory.dmp

    Filesize

    4KB

  • memory/1928-44-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/1928-43-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1928-42-0x00000000034F0000-0x00000000034F2000-memory.dmp

    Filesize

    8KB

  • memory/1928-41-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-40-0x0000000000400000-0x000000000085D000-memory.dmp

    Filesize

    4.4MB

  • memory/1928-38-0x00000000026D0000-0x00000000026D1000-memory.dmp

    Filesize

    4KB

  • memory/1928-37-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-36-0x00000000026B0000-0x00000000026B1000-memory.dmp

    Filesize

    4KB

  • memory/1928-35-0x0000000002360000-0x0000000002361000-memory.dmp

    Filesize

    4KB

  • memory/1928-34-0x00000000026E0000-0x00000000026E1000-memory.dmp

    Filesize

    4KB

  • memory/1928-33-0x0000000002680000-0x0000000002681000-memory.dmp

    Filesize

    4KB

  • memory/1928-32-0x0000000002690000-0x0000000002691000-memory.dmp

    Filesize

    4KB

  • memory/1928-31-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-30-0x0000000002330000-0x0000000002331000-memory.dmp

    Filesize

    4KB

  • memory/1928-29-0x0000000002020000-0x0000000002021000-memory.dmp

    Filesize

    4KB

  • memory/1928-28-0x0000000002060000-0x0000000002061000-memory.dmp

    Filesize

    4KB

  • memory/1928-27-0x00000000022E0000-0x00000000022E1000-memory.dmp

    Filesize

    4KB

  • memory/1928-26-0x0000000002030000-0x0000000002031000-memory.dmp

    Filesize

    4KB

  • memory/1928-25-0x0000000002040000-0x0000000002041000-memory.dmp

    Filesize

    4KB

  • memory/1928-20-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-19-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1928-18-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-17-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-16-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-15-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-14-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-13-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-12-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-11-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/1928-10-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-45-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1928-46-0x0000000002080000-0x00000000020E0000-memory.dmp

    Filesize

    384KB

  • memory/1928-47-0x0000000000400000-0x000000000085D000-memory.dmp

    Filesize

    4.4MB