Analysis

  • max time kernel
    144s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2024, 12:33

General

  • Target
    Heart-Sender-V1.2_Cracked_by_JC0der-FireEye/Config/Heart/Load.exe
  • Size 226KB
  • Sample241107-prb8jasdjc
  • SHA256 1624af752c9f85fd117fafb28feb42a079f283dc133cdcc5799810072a95a6cb
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Config\Heart\Load.exe
    "C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Config\Heart\Load.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2828

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Settings.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Config\Heart\Settings.ini
        • Size 148B
        • SHA256 6f19282087ae76e463085c178ceb3866908ad76d775cdae52dcdfa54208fcd6f
        • MD5 SHA1 SHA512

        memory/2828-0-0x000000007428E000-0x000000007428F000-memory.dmp

        memory/2828-1-0x00000000013E0000-0x000000000141E000-memory.dmp

        memory/2828-2-0x0000000000AA0000-0x0000000000B58000-memory.dmp

        memory/2828-3-0x0000000074280000-0x000000007496E000-memory.dmp

        memory/2828-18-0x0000000074280000-0x000000007496E000-memory.dmp

        memory/2828-19-0x0000000074280000-0x000000007496E000-memory.dmp

        memory/2828-20-0x000000007428E000-0x000000007428F000-memory.dmp

        memory/2828-21-0x0000000074280000-0x000000007496E000-memory.dmp