Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2024 12:33

General

  • Target

    Heart-Sender-V1.2_Cracked_by_JC0der-FireEye/Load.exe

  • Size

    226KB

  • MD5

    9c7691ff597e9efd7f796b31accb78e8

  • SHA1

    81bb289aa37d182b60e86990376a375de7a8decc

  • SHA256

    1624af752c9f85fd117fafb28feb42a079f283dc133cdcc5799810072a95a6cb

  • SHA512

    739f187aaeda13b7ebef3918a965b8da4ee939cd3e60d36802768f52be7b08f5964b121d1e977f4c408ff8ae6aba02df4a4d37785735c2f70d8610551cbab135

  • SSDEEP

    3072:bo98cfXJyH8Rpf1RAshsapucG/6I2VI6whmHAsEye7Zm8TPRQfSFEq8o:b2ZycrfbARZ0AsEye7Zm8TPXFb8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Load.exe
    "C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Load.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4944-0-0x0000000074CAE000-0x0000000074CAF000-memory.dmp

    Filesize

    4KB

  • memory/4944-1-0x0000000000EE0000-0x0000000000F1E000-memory.dmp

    Filesize

    248KB

  • memory/4944-2-0x0000000007D30000-0x0000000007DE8000-memory.dmp

    Filesize

    736KB

  • memory/4944-3-0x000000000A4A0000-0x000000000AA44000-memory.dmp

    Filesize

    5.6MB

  • memory/4944-4-0x0000000074CA0000-0x0000000075450000-memory.dmp

    Filesize

    7.7MB

  • memory/4944-5-0x0000000005A50000-0x0000000005AE2000-memory.dmp

    Filesize

    584KB

  • memory/4944-6-0x0000000005BF0000-0x0000000005BFA000-memory.dmp

    Filesize

    40KB

  • memory/4944-7-0x0000000074CA0000-0x0000000075450000-memory.dmp

    Filesize

    7.7MB

  • memory/4944-8-0x00000000075D0000-0x0000000007924000-memory.dmp

    Filesize

    3.3MB

  • memory/4944-9-0x0000000006B60000-0x0000000006B82000-memory.dmp

    Filesize

    136KB

  • memory/4944-10-0x0000000074CAE000-0x0000000074CAF000-memory.dmp

    Filesize

    4KB

  • memory/4944-11-0x0000000074CA0000-0x0000000075450000-memory.dmp

    Filesize

    7.7MB