Analysis
- max time kernel
144s - max time network
118s - platform
windows7_x64 - resource
win7-20240708-en - resource tags
- submitted
07/11/2024, 12:33
General
- Target Heart-Sender-V1.2_Cracked_by_JC0der-FireEye/Load.exe
- Size 226KB
- Sample241107-prb8jasdjc
- SHA256 1624af752c9f85fd117fafb28feb42a079f283dc133cdcc5799810072a95a6cb
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Load.exe"C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Load.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1680-0-0x0000000073F1E000-0x0000000073F1F000-memory.dmp
memory/1680-1-0x00000000009D0000-0x0000000000A0E000-memory.dmp
memory/1680-2-0x0000000006D80000-0x0000000006E38000-memory.dmp
memory/1680-3-0x0000000073F10000-0x00000000745FE000-memory.dmp
memory/1680-4-0x0000000073F10000-0x00000000745FE000-memory.dmp
memory/1680-5-0x0000000073F10000-0x00000000745FE000-memory.dmp
memory/1680-6-0x0000000073F1E000-0x0000000073F1F000-memory.dmp
memory/1680-7-0x0000000073F10000-0x00000000745FE000-memory.dmp