Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29-10-2024 20:12
General
-
Target
【GM工具】/g2d.exe
-
Size
1.3MB
-
MD5
24d54059eae783f0da6e90d2426b7cbb
-
SHA1
77a69e0e71a6837bf50923f2361830ed2795f9c4
-
SHA256
fceda9b830adc48db7541d54209c266261bbc706005f680ebc6f449463daa9c8
-
SHA512
860443a21fa0782d7b898e9bed25b80cfe027dc80e81dae46bb6c218d4b7f21ef0985d47cb89b1083485e0321e37b48e62ff7ffd0d79b9d9721b47a75882ea77
-
SSDEEP
24576:NirBetTOMpUGyG0d4C6WutottMmaxRl0eEcgLbANr9r8Vtc:NABkTnpUGyG0dyOMZdpEcg3Ir8VW
Score
5/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\【GM工具】\g2d.exe"C:\Users\Admin\AppData\Local\Temp\【GM工具】\g2d.exe"1⤵
- System Location Discovery: System Language Discovery
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
364KB
-
Filesize
2.1MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
600KB
-
Filesize
600KB
-
Filesize
40KB
-
Filesize
2.1MB
-
Filesize
364KB