Analysis

  • max time kernel
    140s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2024, 17:30

General

  • Target

    $EXEDIR/XDictpatch.exe

  • Size

    19KB

  • MD5

    e6382fde8198fd6122c5d52f019ab41a

  • SHA1

    538a4fe3cbd1208f8cd9062656fa022258f9bb1a

  • SHA256

    b486a28ca5dfa3b9bc59a1b8d9513132b4acda483c4747f4a795c9127650fc41

  • SHA512

    0ce2c00919c968b96e839d21fe6ec5ca12675d905d756f70307c1b240772c5c4bb6f17a2142fe30f0474fd3a521151896fe28ab2cdfe7a84292e6e9e4b168ef1

  • SSDEEP

    384:S3XWa/9FfcMHrj5huK5psIfKy2Nh98MPq+uwQqEmJHf:S3XWa/9y98CpNcLLbOH

Score
5/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$EXEDIR\XDictpatch.exe
    "C:\Users\Admin\AppData\Local\Temp\$EXEDIR\XDictpatch.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3660-0-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB

  • memory/3660-1-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB