Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-es -
resource tags
arch:x64arch:x86image:win7-20240903-eslocale:es-esos:windows7-x64systemwindows -
submitted
17/10/2024, 00:14
Static task
static1
Behavioral task
behavioral1
Sample
pct_trial_installer_20241016.17291238325471b9952.exe
Resource
win7-20240903-es
Behavioral task
behavioral2
Sample
$TEMP/downloader_easeus/13.0/4trial/EDownloader.exe
Resource
win7-20240903-es
Behavioral task
behavioral3
Sample
$TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrap.dll
Resource
win7-20240903-es
Behavioral task
behavioral4
Sample
$TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrapExe.exe
Resource
win7-20240903-es
Behavioral task
behavioral5
Sample
$TEMP/downloader_easeus/13.0/4trial/aliyun/InfoForSetup.exe
Resource
win7-20241010-es
General
-
Target
$TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrapExe.exe
-
Size
106KB
-
MD5
674413dbbc708d32d53b386254eedb54
-
SHA1
281ef9b78e8a80dac4b4efe9d8d76ee4eeedc79c
-
SHA256
72371235cb364ab3891597f40a3f50bd64660a808979bd28bcf1c0e7154aa949
-
SHA512
34cd6e982c98d7d4cb763c9bbb20942a507fabc189f3fedd30433d2b79739189a3efbe81f4db465f9e401e3f01939bc8148b178679a0780fe1b000259fd947fe
-
SSDEEP
1536:i554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUbpic4pf:hswTbD6LLraInhEdlg5BJUbpiVp
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AliyunWrapExe.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD58ca3932b29dffcb46ef4e9e948769485
SHA1c32036b6fe67b4c9fcf2424102500bebd0254c10
SHA256dd3720ef5b6810bd5335551fcac06907240a0202e6293e2326ac5cb43e0cb81b
SHA51249ed207920960335bde4200e2e18921d929875075a8608177e27459388e9bc738880a1c3f894a453ed465ac0ad14452efe1c63d0175bc0ef7571e70bf08c7ea0
-
Filesize
88B
MD57f411750d07619f38537e7fd612b8b44
SHA1cda241a1ce5141288582c8f0ac4850992b427bdc
SHA256ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87
SHA51235dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8
-
Filesize
1B
MD5cfcd208495d565ef66e7dff9f98764da
SHA1b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA2565feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA51231bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99