Analysis

  • max time kernel
    110s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-11-2024 17:45

General

  • Target

    f6f652122c7da8d27ca7084a40da94050632d6694ed7e976f9b72977a3d77384N.exe

  • Size

    1.3MB

  • MD5

    6463d8b3b095662598d9823df35c5c70

  • SHA1

    6ec181e03393deba51664099dc1e8f3ad5041909

  • SHA256

    f6f652122c7da8d27ca7084a40da94050632d6694ed7e976f9b72977a3d77384

  • SHA512

    10c630672fb873857f71129998daab94054a6fb8573f2cd62b6090dba2b987d1ce776ef9bb115a8cf8356a987cb02107d7e4ffe6a2461598d40c7ba7817625fe

  • SSDEEP

    24576:Ej6wLhExiZNzXaAc4yc3fNs5OzlKT8FGdg1XaNWtrA5jdv2s9toMWuYc2Z/T:EmwLhbraAly0fZzlZGdgsMt03Os97WuY

Score
7/10

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f6f652122c7da8d27ca7084a40da94050632d6694ed7e976f9b72977a3d77384N.exe
    "C:\Users\Admin\AppData\Local\Temp\f6f652122c7da8d27ca7084a40da94050632d6694ed7e976f9b72977a3d77384N.exe"
    1⤵
    • Identifies Wine through registry keys
    • System Location Discovery: System Language Discovery
    PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2176-0-0x0000000000400000-0x00000000006BA000-memory.dmp

    Filesize

    2.7MB

  • memory/2176-1-0x00000000024D0000-0x0000000002530000-memory.dmp

    Filesize

    384KB

  • memory/2176-12-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-14-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-11-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-52-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-9-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-8-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-7-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-56-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-55-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-53-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-51-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-50-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-49-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-48-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-47-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-46-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-45-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-44-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-43-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-42-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-41-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-40-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-39-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-38-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-37-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-36-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-35-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-34-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-33-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-32-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-31-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-30-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-29-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-28-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-27-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-26-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-25-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-24-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-23-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-22-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-21-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-20-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-19-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-18-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-17-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-16-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-15-0x00000000035D0000-0x00000000036D0000-memory.dmp

    Filesize

    1024KB

  • memory/2176-54-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-6-0x00000000026B0000-0x00000000026B1000-memory.dmp

    Filesize

    4KB

  • memory/2176-5-0x0000000002720000-0x0000000002721000-memory.dmp

    Filesize

    4KB

  • memory/2176-4-0x0000000002690000-0x0000000002691000-memory.dmp

    Filesize

    4KB

  • memory/2176-3-0x00000000026C0000-0x00000000026C1000-memory.dmp

    Filesize

    4KB

  • memory/2176-13-0x00000000026D0000-0x00000000026D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-10-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-2-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2176-57-0x0000000000400000-0x00000000006BA000-memory.dmp

    Filesize

    2.7MB

  • memory/2176-59-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2176-58-0x00000000024D0000-0x0000000002530000-memory.dmp

    Filesize

    384KB

  • memory/2176-60-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-61-0x00000000035D0000-0x00000000036D0000-memory.dmp

    Filesize

    1024KB

  • memory/2176-90-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-95-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-94-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-93-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-92-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-91-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-89-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-88-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-87-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-86-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-85-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-84-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-83-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-82-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-81-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-80-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-79-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-78-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-77-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-76-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-75-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-74-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-73-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-72-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-71-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-70-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-69-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-68-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-67-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-66-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-65-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-64-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-63-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2176-62-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB