Analysis

  • max time kernel
    71s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    03/11/2024, 08:12

General

  • Target

    The_Moral_Sword_of_Asagi/Game.exe

  • Size

    137KB

  • MD5

    bd9ebb7d09f9111a9f0a0ba2238eaf80

  • SHA1

    28c753124d845f61373be87d392ab839914ebdc5

  • SHA256

    e5435c0e86a8181a3d88206d5dd47145f2aa768afcae6d8c2ae449f8601a8724

  • SHA512

    f2dcdc9a1e64af74eeded730112d87d97ca2e5d894f25324b27c5f1b0680c948e3bcc73136615a4822ac6a75ac43c3b21fb8dcd031ae4203c2798bc6f9773231

  • SSDEEP

    3072:fWK+I+/wslzo5lwTU6gixJpLOaHIYsrIjPW4:fWK+xZSixJEaoYsM+4

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\The_Moral_Sword_of_Asagi\Game.exe
    "C:\Users\Admin\AppData\Local\Temp\The_Moral_Sword_of_Asagi\Game.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:2692

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2692-0-0x0000000010000000-0x0000000010324000-memory.dmp

          Filesize

          3.1MB

        • memory/2692-2-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-1-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-31-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-30-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-29-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-28-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-27-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-26-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-25-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-24-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-23-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-22-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-21-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-20-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-19-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-18-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-17-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-34-0x0000000003700000-0x0000000003701000-memory.dmp

          Filesize

          4KB

        • memory/2692-32-0x00000000036A0000-0x00000000036A4000-memory.dmp

          Filesize

          16KB

        • memory/2692-39-0x0000000003690000-0x0000000003691000-memory.dmp

          Filesize

          4KB

        • memory/2692-38-0x00000000036C0000-0x00000000036C1000-memory.dmp

          Filesize

          4KB

        • memory/2692-37-0x0000000002F00000-0x0000000002F01000-memory.dmp

          Filesize

          4KB

        • memory/2692-36-0x0000000002EE0000-0x0000000002EE1000-memory.dmp

          Filesize

          4KB

        • memory/2692-35-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-33-0x00000000036F0000-0x00000000036F1000-memory.dmp

          Filesize

          4KB

        • memory/2692-16-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-15-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-14-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-13-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-12-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-11-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-10-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-9-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-8-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-7-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-6-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-5-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-4-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-3-0x00000000036B0000-0x00000000036B1000-memory.dmp

          Filesize

          4KB

        • memory/2692-40-0x0000000010000000-0x0000000010324000-memory.dmp

          Filesize

          3.1MB

        • memory/2692-41-0x00000000036A0000-0x00000000036A1000-memory.dmp

          Filesize

          4KB

        • memory/2692-43-0x0000000010000000-0x0000000010324000-memory.dmp

          Filesize

          3.1MB