Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-es -
resource tags
arch:x64arch:x86image:win7-20240903-eslocale:es-esos:windows7-x64systemwindows -
submitted
17/10/2024, 00:27
Static task
static1
Behavioral task
behavioral1
Sample
pct_trial_installer_20241016.17291248214345b9952.exe
Resource
win7-20240903-es
Behavioral task
behavioral2
Sample
$TEMP/downloader_easeus/13.0/4trial/EDownloader.exe
Resource
win7-20240708-es
Behavioral task
behavioral3
Sample
$TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrap.dll
Resource
win7-20240708-es
Behavioral task
behavioral4
Sample
$TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrapExe.exe
Resource
win7-20240903-es
Behavioral task
behavioral5
Sample
$TEMP/downloader_easeus/13.0/4trial/aliyun/InfoForSetup.exe
Resource
win7-20241010-es
General
-
Target
$TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrapExe.exe
-
Size
106KB
-
MD5
674413dbbc708d32d53b386254eedb54
-
SHA1
281ef9b78e8a80dac4b4efe9d8d76ee4eeedc79c
-
SHA256
72371235cb364ab3891597f40a3f50bd64660a808979bd28bcf1c0e7154aa949
-
SHA512
34cd6e982c98d7d4cb763c9bbb20942a507fabc189f3fedd30433d2b79739189a3efbe81f4db465f9e401e3f01939bc8148b178679a0780fe1b000259fd947fe
-
SSDEEP
1536:i554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUbpic4pf:hswTbD6LLraInhEdlg5BJUbpiVp
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AliyunWrapExe.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD56daf4bb7b19c258cf31f9385cb48d9fa
SHA1592085ce4fd2624d08d20bda09ccb558d73f0074
SHA256466393d0ac21105fb3f39e42eeaa8ed0e09ed54d602d4341393927dfc0326519
SHA5129066b56998bcf784d3c62d9f0fac6e343936d61a94ff0277fb8b30ea1b5eb2880b3683c78e9b6646986d1fc290145ce724ea8731ebb4606c8466acb601051ef5
-
Filesize
88B
MD57f411750d07619f38537e7fd612b8b44
SHA1cda241a1ce5141288582c8f0ac4850992b427bdc
SHA256ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87
SHA51235dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8
-
Filesize
1B
MD5cfcd208495d565ef66e7dff9f98764da
SHA1b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA2565feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA51231bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99