Overview

overview

10

Static

static

10

русск...ce.exe

windows7-x64

русск...ce.exe

windows10-2004-x64

русск...ts.vbs

windows7-x64

1

русск...ts.vbs

windows10-2004-x64

1

русск...es.vbs

windows7-x64

1

русск...es.vbs

windows10-2004-x64

1

русск...gs.vbs

windows7-x64

1

русск...gs.vbs

windows10-2004-x64

1

русск...es.vbs

windows7-x64

1

русск...es.vbs

windows10-2004-x64

1

русск...ns.vbs

windows7-x64

1

русск...ns.vbs

windows10-2004-x64

1

русск...ts.vbs

windows7-x64

1

русск...ts.vbs

windows10-2004-x64

1

русск...ld.vbs

windows7-x64

1

русск...ld.vbs

windows10-2004-x64

1

русск...nc.dll

windows7-x64

3

русск...nc.dll

windows10-2004-x64

3

русск...nc.dll

windows7-x64

3

русск...nc.dll

windows10-2004-x64

3

русск...cc.exe

windows7-x64

3

русск...cc.exe

windows10-2004-x64

3

русск...no.exe

windows7-x64

10

русск...no.exe

windows10-2004-x64

10

русск...ck.dll

windows7-x64

3

русск...ck.dll

windows10-2004-x64

3

русск...ack.so

ubuntu-24.04-amd64

1

русск...ex.dll

windows7-x64

3

русск...ex.dll

windows10-2004-x64

3

русск...gex.so

ubuntu-22.04-amd64

1

русск...er.dll

windows7-x64

3

русск...er.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    22-10-2024 07:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    русский экстримальный сервер/pawno/pawncc.exe

  • Size

    15KB

  • MD5

    5b8766d335b25f1a180af10cb736b6ba

  • SHA1

    83f081d683840f9e9cfb161801d13edbcfd50646

  • SHA256

    e086cbaeee177c5e56cc3cf124a014f3496297c8d8de0fe17d49468584a9fb3f

  • SHA512

    25bf21940a7399fbe5709997d5327142d706e5023cd14560b29d65eb1e1dc3526a3432c94b0d711f2affedbfdcb6f3be84af6549a742d0d62832530558f58d2d

  • SSDEEP

    192:1m58SVl+4smhjTMW6vrkTGeTDT//BWLGeTkGeTGOvs7HlFMMafc:1m58SV04lt6MGevTnYLGeQGeyVHlSMak

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\русский экстримальный сервер\pawno\pawncc.exe
    "C:\Users\Admin\AppData\Local\Temp\русский экстримальный сервер\pawno\pawncc.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2152

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads