Resubmissions
09/11/2024, 22:49
241109-2r2veatfrl1009/11/2024, 22:47
241109-2qkjqssrdz1009/11/2024, 22:46
241109-2p2fvstfqj1009/11/2024, 22:44
241109-2nsgkasrbt1007/11/2024, 16:00
241107-tfl1taxpgl1028/02/2024, 21:26
240228-1amtgsec8410/02/2024, 17:17
240210-vtnl8sge3610Analysis
- max time kernel
425s - max time network
1148s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
09/11/2024, 22:46
General
- Target ggpermV3/ggpermV3.exe
- Size 62KB
- Sample241109-2p2fvstfqj
- SHA256 e333b29fa06d2138c9a4c634fde1fe4212bd2a027c0175008001c8af60d34053
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ggpermV3\ggpermV3.exe"C:\Users\Admin\AppData\Local\Temp\ggpermV3\ggpermV3.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2296-0-0x000000007514E000-0x000000007514F000-memory.dmp
memory/2296-1-0x0000000000090000-0x00000000000A6000-memory.dmp
memory/2296-2-0x00000000050B0000-0x0000000005654000-memory.dmp
memory/2296-3-0x0000000004B00000-0x0000000004B92000-memory.dmp
memory/2296-4-0x0000000004E30000-0x0000000004E3A000-memory.dmp
memory/2296-5-0x0000000075140000-0x00000000758F0000-memory.dmp
memory/2296-6-0x0000000007250000-0x000000000739E000-memory.dmp
memory/2296-7-0x0000000004F20000-0x0000000004F34000-memory.dmp
memory/2296-8-0x0000000075140000-0x00000000758F0000-memory.dmp
memory/2296-9-0x000000007514E000-0x000000007514F000-memory.dmp
memory/2296-10-0x0000000075140000-0x00000000758F0000-memory.dmp