Analysis

  • max time kernel
    150s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2024 12:33

General

  • Target

    Heart-Sender-V1.2_Cracked_by_JC0der-FireEye/Config/Heart/Load.exe

  • Size

    226KB

  • MD5

    9c7691ff597e9efd7f796b31accb78e8

  • SHA1

    81bb289aa37d182b60e86990376a375de7a8decc

  • SHA256

    1624af752c9f85fd117fafb28feb42a079f283dc133cdcc5799810072a95a6cb

  • SHA512

    739f187aaeda13b7ebef3918a965b8da4ee939cd3e60d36802768f52be7b08f5964b121d1e977f4c408ff8ae6aba02df4a4d37785735c2f70d8610551cbab135

  • SSDEEP

    3072:bo98cfXJyH8Rpf1RAshsapucG/6I2VI6whmHAsEye7Zm8TPRQfSFEq8o:b2ZycrfbARZ0AsEye7Zm8TPXFb8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Config\Heart\Load.exe
    "C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Config\Heart\Load.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Heart-Sender-V1.2_Cracked_by_JC0der-FireEye\Config\Heart\Settings.ini

    Filesize

    148B

    MD5

    c264554e8e058a904b349426e9d55106

    SHA1

    07767c8ac19271942719e6a46e3aa7b35d72dd74

    SHA256

    6f19282087ae76e463085c178ceb3866908ad76d775cdae52dcdfa54208fcd6f

    SHA512

    27c86786986337aaf2aeac6f70486bc979a072cd0eeb9246346fe62f1e725e4280a6ed2ce63383a4ac71a8ad442d4f5029da5683c506357828ae75096d1be13d

  • memory/652-6-0x00000000056C0000-0x00000000056CA000-memory.dmp

    Filesize

    40KB

  • memory/652-2-0x00000000079E0000-0x0000000007A98000-memory.dmp

    Filesize

    736KB

  • memory/652-3-0x000000000A150000-0x000000000A6F4000-memory.dmp

    Filesize

    5.6MB

  • memory/652-4-0x0000000074510000-0x0000000074CC0000-memory.dmp

    Filesize

    7.7MB

  • memory/652-5-0x0000000005700000-0x0000000005792000-memory.dmp

    Filesize

    584KB

  • memory/652-0-0x000000007451E000-0x000000007451F000-memory.dmp

    Filesize

    4KB

  • memory/652-1-0x0000000000B40000-0x0000000000B7E000-memory.dmp

    Filesize

    248KB

  • memory/652-21-0x0000000074510000-0x0000000074CC0000-memory.dmp

    Filesize

    7.7MB

  • memory/652-22-0x0000000074510000-0x0000000074CC0000-memory.dmp

    Filesize

    7.7MB

  • memory/652-23-0x0000000007150000-0x00000000074A4000-memory.dmp

    Filesize

    3.3MB

  • memory/652-24-0x0000000006400000-0x0000000006422000-memory.dmp

    Filesize

    136KB

  • memory/652-25-0x000000007451E000-0x000000007451F000-memory.dmp

    Filesize

    4KB

  • memory/652-26-0x0000000074510000-0x0000000074CC0000-memory.dmp

    Filesize

    7.7MB