Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-es
  • resource tags

    arch:x64arch:x86image:win7-20240903-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    17/10/2024, 00:27

General

  • Target

    $TEMP/downloader_easeus/13.0/4trial/aliyun/AliyunWrapExe.exe

  • Size

    106KB

  • MD5

    674413dbbc708d32d53b386254eedb54

  • SHA1

    281ef9b78e8a80dac4b4efe9d8d76ee4eeedc79c

  • SHA256

    72371235cb364ab3891597f40a3f50bd64660a808979bd28bcf1c0e7154aa949

  • SHA512

    34cd6e982c98d7d4cb763c9bbb20942a507fabc189f3fedd30433d2b79739189a3efbe81f4db465f9e401e3f01939bc8148b178679a0780fe1b000259fd947fe

  • SSDEEP

    1536:i554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUbpic4pf:hswTbD6LLraInhEdlg5BJUbpiVp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\AliyunWrapExe.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\AliyunWrapExe.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1664

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\AliyunConfig.ini

          Filesize

          1KB

          MD5

          6daf4bb7b19c258cf31f9385cb48d9fa

          SHA1

          592085ce4fd2624d08d20bda09ccb558d73f0074

          SHA256

          466393d0ac21105fb3f39e42eeaa8ed0e09ed54d602d4341393927dfc0326519

          SHA512

          9066b56998bcf784d3c62d9f0fac6e343936d61a94ff0277fb8b30ea1b5eb2880b3683c78e9b6646986d1fc290145ce724ea8731ebb4606c8466acb601051ef5

        • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\DataFile.ini

          Filesize

          88B

          MD5

          7f411750d07619f38537e7fd612b8b44

          SHA1

          cda241a1ce5141288582c8f0ac4850992b427bdc

          SHA256

          ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87

          SHA512

          35dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8

        • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\13.0\4trial\aliyun\tempInfo.web

          Filesize

          1B

          MD5

          cfcd208495d565ef66e7dff9f98764da

          SHA1

          b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

          SHA256

          5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

          SHA512

          31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99