Analysis

  • max time kernel
    1s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    11-10-2024 17:50

General

  • Target

    0x000a000000023b66-19.exe

  • Size

    3.2MB

  • MD5

    6965c7c82a2f2c3fb640366f28858ec3

  • SHA1

    af31705cf66d7666bb39dbfbb88721939577a4d1

  • SHA256

    ad14c9e431de085972ac745e5a3ee13119cc13e2287db7edfcdae4261ded7b24

  • SHA512

    42db28f3d87f32cf67ccf24b84ec41c7f0185bf3d6a3116940ecd797f5fb44463cfc5be751382a29e2e94538b067dfb79279b0c0c5938f42ee5e7fd2492de88c

  • SSDEEP

    98304:BtUYhuUV2r6lU36yLc2Tp64Lc7PSwxWnF:BSYhPID64Tpzc7Swo

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0x000a000000023b66-19.exe
    "C:\Users\Admin\AppData\Local\Temp\0x000a000000023b66-19.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3124

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3124-0-0x000000007465E000-0x000000007465F000-memory.dmp

    Filesize

    4KB

  • memory/3124-1-0x00000000004F0000-0x000000000082E000-memory.dmp

    Filesize

    3.2MB

  • memory/3124-2-0x0000000005290000-0x000000000532C000-memory.dmp

    Filesize

    624KB

  • memory/3124-3-0x0000000005940000-0x0000000005EE6000-memory.dmp

    Filesize

    5.6MB

  • memory/3124-4-0x0000000005430000-0x00000000054C2000-memory.dmp

    Filesize

    584KB

  • memory/3124-5-0x0000000005370000-0x000000000537A000-memory.dmp

    Filesize

    40KB

  • memory/3124-6-0x00000000055C0000-0x0000000005616000-memory.dmp

    Filesize

    344KB

  • memory/3124-7-0x0000000074650000-0x0000000074E01000-memory.dmp

    Filesize

    7.7MB

  • memory/3124-8-0x0000000007F90000-0x0000000007FA4000-memory.dmp

    Filesize

    80KB