Analysis

  • max time kernel
    140s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2024, 22:09

General

  • Target

    CircuitMaker 2000 Pro SP1/Files/SETUPCM2000.exe

  • Size

    858KB

  • MD5

    8b556c7694520cab603976b47185fbf9

  • SHA1

    0a7740b177a6658c9e8abbe5827f20e0183d95ea

  • SHA256

    4eb559067a8be84467b3f8f2365c86083459ba374239e5574903fd9bed3875bd

  • SHA512

    63c0e3f45b69aa47e11cc893ea10ea33efa422e475202a4bc55d4afb006848f9834de87b39fc87174ce92b05178c4433dc5cf3a747257815de22df0f331810a3

  • SSDEEP

    12288:ZWZiWr4I5zOg4uwPbEgmMUHOUVHeUoOsLk8IR776Zo:MZHh5afUHfxoubpmZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\CircuitMaker 2000 Pro SP1\Files\SETUPCM2000.exe
    "C:\Users\Admin\AppData\Local\Temp\CircuitMaker 2000 Pro SP1\Files\SETUPCM2000.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3600-0-0x0000000002380000-0x0000000002381000-memory.dmp

    Filesize

    4KB

  • memory/3600-2-0x0000000002380000-0x0000000002381000-memory.dmp

    Filesize

    4KB

  • memory/3600-1-0x0000000000400000-0x00000000004DB000-memory.dmp

    Filesize

    876KB