Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2024 09:18

General

  • Target

    setup/AISetup-Crack.exe

  • Size

    2.4MB

  • MD5

    a6f2af8aa201a51b90ce7242736a7af4

  • SHA1

    303184b65412f10df9e3860a7b3337e165c820db

  • SHA256

    7e29a55958df55dcc4bb4e563111659226cdac60bc7141f8124acaa8eac66565

  • SHA512

    dd5271e62bb7f69b217ea912c378cccf41f4132efe48e4ac11fe04d6869d3db13cc52dd991507d1ba081b88bcbc8c96324a11d7a1623937be2a0403c353d7650

  • SSDEEP

    49152:P8QETEm8KR2frmN7o8cwa877IRgZVFiIFwDchf3fsmfNpF/t:M8KR2frmNja8vIRgZu6hf3fsmN/t

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup\AISetup-Crack.exe
    "C:\Users\Admin\AppData\Local\Temp\setup\AISetup-Crack.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3688-0-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-5-0x0000000001410000-0x0000000001411000-memory.dmp

    Filesize

    4KB

  • memory/3688-4-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-6-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-3-0x0000000000BB4000-0x0000000000BB5000-memory.dmp

    Filesize

    4KB

  • memory/3688-1-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-2-0x0000000002FD0000-0x0000000003011000-memory.dmp

    Filesize

    260KB

  • memory/3688-7-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/3688-9-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-8-0x0000000075E40000-0x00000000760C1000-memory.dmp

    Filesize

    2.5MB

  • memory/3688-11-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-10-0x0000000076230000-0x0000000076313000-memory.dmp

    Filesize

    908KB

  • memory/3688-12-0x00000000728B0000-0x0000000072939000-memory.dmp

    Filesize

    548KB

  • memory/3688-13-0x00000000768C0000-0x0000000076E73000-memory.dmp

    Filesize

    5.7MB

  • memory/3688-14-0x0000000005E90000-0x00000000064A8000-memory.dmp

    Filesize

    6.1MB

  • memory/3688-15-0x00000000058A0000-0x00000000058B2000-memory.dmp

    Filesize

    72KB

  • memory/3688-16-0x00000000059D0000-0x0000000005ADA000-memory.dmp

    Filesize

    1.0MB

  • memory/3688-17-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-18-0x0000000005900000-0x000000000593C000-memory.dmp

    Filesize

    240KB

  • memory/3688-19-0x0000000005940000-0x000000000598C000-memory.dmp

    Filesize

    304KB

  • memory/3688-20-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-21-0x0000000002FD0000-0x0000000003011000-memory.dmp

    Filesize

    260KB

  • memory/3688-24-0x0000000076FA0000-0x0000000076FC4000-memory.dmp

    Filesize

    144KB

  • memory/3688-25-0x00000000766D0000-0x000000007674B000-memory.dmp

    Filesize

    492KB

  • memory/3688-27-0x0000000075950000-0x0000000075A0F000-memory.dmp

    Filesize

    764KB

  • memory/3688-26-0x0000000076E80000-0x0000000076FA0000-memory.dmp

    Filesize

    1.1MB

  • memory/3688-23-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/3688-28-0x0000000075510000-0x00000000755CF000-memory.dmp

    Filesize

    764KB

  • memory/3688-31-0x0000000075E40000-0x00000000760C1000-memory.dmp

    Filesize

    2.5MB

  • memory/3688-35-0x00000000745D0000-0x00000000745D8000-memory.dmp

    Filesize

    32KB

  • memory/3688-41-0x0000000075760000-0x00000000757F6000-memory.dmp

    Filesize

    600KB

  • memory/3688-47-0x00000000755D0000-0x0000000075633000-memory.dmp

    Filesize

    396KB

  • memory/3688-46-0x000000006EC80000-0x000000006ED63000-memory.dmp

    Filesize

    908KB

  • memory/3688-45-0x000000006ED70000-0x000000006EDDB000-memory.dmp

    Filesize

    428KB

  • memory/3688-43-0x000000006EF70000-0x000000006F180000-memory.dmp

    Filesize

    2.1MB

  • memory/3688-44-0x000000006EDE0000-0x000000006EF6D000-memory.dmp

    Filesize

    1.6MB

  • memory/3688-42-0x0000000076430000-0x0000000076449000-memory.dmp

    Filesize

    100KB

  • memory/3688-36-0x0000000073E20000-0x00000000745D0000-memory.dmp

    Filesize

    7.7MB

  • memory/3688-40-0x00000000728B0000-0x0000000072939000-memory.dmp

    Filesize

    548KB

  • memory/3688-39-0x0000000076230000-0x0000000076313000-memory.dmp

    Filesize

    908KB

  • memory/3688-38-0x0000000073D50000-0x0000000073DFB000-memory.dmp

    Filesize

    684KB

  • memory/3688-37-0x0000000073E00000-0x0000000073E14000-memory.dmp

    Filesize

    80KB

  • memory/3688-33-0x00000000745F0000-0x000000007467D000-memory.dmp

    Filesize

    564KB

  • memory/3688-34-0x00000000745E0000-0x00000000745EF000-memory.dmp

    Filesize

    60KB

  • memory/3688-32-0x0000000075800000-0x0000000075845000-memory.dmp

    Filesize

    276KB

  • memory/3688-30-0x0000000074D10000-0x0000000074D62000-memory.dmp

    Filesize

    328KB

  • memory/3688-74-0x0000000000B80000-0x0000000000DC8000-memory.dmp

    Filesize

    2.3MB

  • memory/3688-75-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB