Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    30-10-2024 23:43

General

  • Target

    ae83d705f53bbe97ca150294fc3315ec4bbc3bce982c6a9d1f7a69ce4e5cbd2eN.exe

  • Size

    1.6MB

  • MD5

    b1f165074def5a38901e52ccc7ebd800

  • SHA1

    00f9d1fd6faccef1d57304876be3e70e98c71bbe

  • SHA256

    ae83d705f53bbe97ca150294fc3315ec4bbc3bce982c6a9d1f7a69ce4e5cbd2e

  • SHA512

    8454f69c3c9eac9330ddfabbd2b18cb46e130de297aa65ea6894bf16eaa0a8b66cfd2a515e466e61cbdd62207567199ff259b0b153d547850547f9521fe2a418

  • SSDEEP

    24576:hB4ScdbnWLR94PqG5kCcvUY6rZ49Q53aGGO+W:hBxLIY6rZ49QkXO+

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ae83d705f53bbe97ca150294fc3315ec4bbc3bce982c6a9d1f7a69ce4e5cbd2eN.exe
    "C:\Users\Admin\AppData\Local\Temp\ae83d705f53bbe97ca150294fc3315ec4bbc3bce982c6a9d1f7a69ce4e5cbd2eN.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\msvcp110.dll

    Filesize

    598KB

    MD5

    f81a0a8d9d7803481d1cc4dd7eaf0d38

    SHA1

    2b26a470f2254c1e1be65dc225ae9579eab931ae

    SHA256

    d54c4c3f4e0391459a329618c2c8a5f638f869b97da0f6af1ff0fc77b4302407

    SHA512

    473afe00867b10f0b491ef071bd6b63c53f2abf9fc9450925929565a0f45e6ff25ad317fd4889ff9927f2f6cf62d6d614d7309ffb7e7b28b688e6bd6dc2ae85e

  • memory/2772-0-0x0000000074ACE000-0x0000000074ACF000-memory.dmp

    Filesize

    4KB

  • memory/2772-1-0x0000000000FD0000-0x000000000116A000-memory.dmp

    Filesize

    1.6MB

  • memory/2772-6-0x0000000076EC0000-0x0000000076F81000-memory.dmp

    Filesize

    772KB

  • memory/2772-7-0x0000000074AC0000-0x00000000751AE000-memory.dmp

    Filesize

    6.9MB

  • memory/2772-8-0x0000000074AC0000-0x00000000751AE000-memory.dmp

    Filesize

    6.9MB