Resubmissions

17/10/2024, 00:17

241017-ak7zas1fjh 8

17/10/2024, 00:14

241017-ajbvgavcjn 8

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-es
  • resource tags

    arch:x64arch:x86image:win7-20240903-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    17/10/2024, 00:14

General

  • Target

    $TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrapExe.exe

  • Size

    106KB

  • MD5

    674413dbbc708d32d53b386254eedb54

  • SHA1

    281ef9b78e8a80dac4b4efe9d8d76ee4eeedc79c

  • SHA256

    72371235cb364ab3891597f40a3f50bd64660a808979bd28bcf1c0e7154aa949

  • SHA512

    34cd6e982c98d7d4cb763c9bbb20942a507fabc189f3fedd30433d2b79739189a3efbe81f4db465f9e401e3f01939bc8148b178679a0780fe1b000259fd947fe

  • SSDEEP

    1536:i554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUbpic4pf:hswTbD6LLraInhEdlg5BJUbpiVp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\AliyunWrapExe.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\AliyunWrapExe.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1664

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\AliyunConfig.ini

          Filesize

          1KB

          MD5

          8ca3932b29dffcb46ef4e9e948769485

          SHA1

          c32036b6fe67b4c9fcf2424102500bebd0254c10

          SHA256

          dd3720ef5b6810bd5335551fcac06907240a0202e6293e2326ac5cb43e0cb81b

          SHA512

          49ed207920960335bde4200e2e18921d929875075a8608177e27459388e9bc738880a1c3f894a453ed465ac0ad14452efe1c63d0175bc0ef7571e70bf08c7ea0

        • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\DataFile.ini

          Filesize

          88B

          MD5

          7f411750d07619f38537e7fd612b8b44

          SHA1

          cda241a1ce5141288582c8f0ac4850992b427bdc

          SHA256

          ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87

          SHA512

          35dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8

        • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\tempInfo.web

          Filesize

          1B

          MD5

          cfcd208495d565ef66e7dff9f98764da

          SHA1

          b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

          SHA256

          5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

          SHA512

          31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99