Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    07-11-2024 11:22

General

  • Target

    8d59ab8245f380aa60471522eea024f4336e791b676b30196995783cbe8a4519.exe

  • Size

    446KB

  • MD5

    e0787750551ff5613f2e8834abd05ea4

  • SHA1

    2d3befa9bdb75062f1857a514f8acfa9b681f531

  • SHA256

    8d59ab8245f380aa60471522eea024f4336e791b676b30196995783cbe8a4519

  • SHA512

    e5c44d7524b9b96dcce41196f393672eb54adb925ee3d82846385087256dc07c111a9a990795687eb0e14aab9985e00b2c661d48a5508a291a731e5dc5defbae

  • SSDEEP

    12288:AtQgEYr14nB0cha/7p/p26sk2lWlQZIwR5i/LvwW:AzEgrP/HrglWlQZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8d59ab8245f380aa60471522eea024f4336e791b676b30196995783cbe8a4519.exe
    "C:\Users\Admin\AppData\Local\Temp\8d59ab8245f380aa60471522eea024f4336e791b676b30196995783cbe8a4519.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:1504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\msvcp110.dll

    Filesize

    622KB

    MD5

    a91ea405d77ddbcd0516c533cf16bc82

    SHA1

    cb8011380d17074671a164b58975abffbf0f0daf

    SHA256

    385640a86350eac4b8a5ec83b75fb5bcb6f5de12a9338b1d1296e3ba09f7ad41

    SHA512

    4390584749bf06a685bcdb9e16a9c700de396e6c183a7ceebe622f84d241af93d363fa15a80e072b61472f8d5cb4f783208b81a5668bbd8cefae483d395d35f0

  • memory/1504-0-0x0000000073EDE000-0x0000000073EDF000-memory.dmp

    Filesize

    4KB

  • memory/1504-1-0x0000000000110000-0x0000000000188000-memory.dmp

    Filesize

    480KB

  • memory/1504-2-0x00000000004E0000-0x00000000004E6000-memory.dmp

    Filesize

    24KB

  • memory/1504-7-0x0000000074E00000-0x0000000074EC1000-memory.dmp

    Filesize

    772KB

  • memory/1504-8-0x0000000073ED0000-0x00000000745BE000-memory.dmp

    Filesize

    6.9MB