Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-11-2024 06:09

General

  • Target

    setup/AISetup-Crack.exe

  • Size

    2.4MB

  • MD5

    be7879386bb4db5b6c8415166db67ef8

  • SHA1

    ddd3021057a36b9f3298abc2844c3905652a9429

  • SHA256

    9871a54a96e578971bde616e6110d08c60d1644734f72358ef04885d16c73d99

  • SHA512

    4b0d06d882df5badbcd6d4445f8d3d4fc4db1fe7ec87018c316e9a0cf49e3e04c9c1459150d18613e5af0327b42d7f42a3eef174e35af6a436d2b903373bd9cc

  • SSDEEP

    49152:edDbG2xgZPfpsRl0OoktUFYbwlEU3AEN6yOVjevmndG:edDbZgZPf2hoktUFYbw23Gvm8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup\AISetup-Crack.exe
    "C:\Users\Admin\AppData\Local\Temp\setup\AISetup-Crack.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4392-0-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-4-0x0000000002C90000-0x0000000002CD1000-memory.dmp

    Filesize

    260KB

  • memory/4392-2-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-5-0x0000000000AAA000-0x0000000000AAB000-memory.dmp

    Filesize

    4KB

  • memory/4392-3-0x0000000000CD0000-0x0000000000CD1000-memory.dmp

    Filesize

    4KB

  • memory/4392-1-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-6-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-7-0x0000000077130000-0x0000000077345000-memory.dmp

    Filesize

    2.1MB

  • memory/4392-9-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-8-0x00000000760C0000-0x0000000076341000-memory.dmp

    Filesize

    2.5MB

  • memory/4392-11-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-12-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-13-0x0000000072E20000-0x0000000072EA9000-memory.dmp

    Filesize

    548KB

  • memory/4392-10-0x0000000077450000-0x0000000077533000-memory.dmp

    Filesize

    908KB

  • memory/4392-16-0x00000000054F0000-0x0000000005502000-memory.dmp

    Filesize

    72KB

  • memory/4392-15-0x0000000005A80000-0x0000000006098000-memory.dmp

    Filesize

    6.1MB

  • memory/4392-17-0x0000000005620000-0x000000000572A000-memory.dmp

    Filesize

    1.0MB

  • memory/4392-14-0x0000000076A30000-0x0000000076FE3000-memory.dmp

    Filesize

    5.7MB

  • memory/4392-18-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-19-0x0000000005550000-0x000000000558C000-memory.dmp

    Filesize

    240KB

  • memory/4392-20-0x00000000055C0000-0x000000000560C000-memory.dmp

    Filesize

    304KB

  • memory/4392-21-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-22-0x0000000002C90000-0x0000000002CD1000-memory.dmp

    Filesize

    260KB

  • memory/4392-25-0x0000000077350000-0x0000000077374000-memory.dmp

    Filesize

    144KB

  • memory/4392-26-0x0000000075F50000-0x0000000075FCB000-memory.dmp

    Filesize

    492KB

  • memory/4392-27-0x0000000075E30000-0x0000000075F50000-memory.dmp

    Filesize

    1.1MB

  • memory/4392-24-0x0000000077130000-0x0000000077345000-memory.dmp

    Filesize

    2.1MB

  • memory/4392-28-0x00000000763B0000-0x000000007646F000-memory.dmp

    Filesize

    764KB

  • memory/4392-31-0x0000000075310000-0x0000000075362000-memory.dmp

    Filesize

    328KB

  • memory/4392-29-0x0000000076970000-0x0000000076A2F000-memory.dmp

    Filesize

    764KB

  • memory/4392-36-0x0000000074B40000-0x0000000074B48000-memory.dmp

    Filesize

    32KB

  • memory/4392-35-0x0000000074B50000-0x0000000074B5F000-memory.dmp

    Filesize

    60KB

  • memory/4392-34-0x0000000074B60000-0x0000000074BED000-memory.dmp

    Filesize

    564KB

  • memory/4392-33-0x0000000076470000-0x00000000764B5000-memory.dmp

    Filesize

    276KB

  • memory/4392-32-0x00000000760C0000-0x0000000076341000-memory.dmp

    Filesize

    2.5MB

  • memory/4392-38-0x0000000074370000-0x0000000074384000-memory.dmp

    Filesize

    80KB

  • memory/4392-39-0x00000000742C0000-0x000000007436B000-memory.dmp

    Filesize

    684KB

  • memory/4392-43-0x0000000076910000-0x0000000076929000-memory.dmp

    Filesize

    100KB

  • memory/4392-42-0x00000000773B0000-0x0000000077446000-memory.dmp

    Filesize

    600KB

  • memory/4392-41-0x0000000072E20000-0x0000000072EA9000-memory.dmp

    Filesize

    548KB

  • memory/4392-40-0x0000000077450000-0x0000000077533000-memory.dmp

    Filesize

    908KB

  • memory/4392-44-0x000000006F4E0000-0x000000006F6F0000-memory.dmp

    Filesize

    2.1MB

  • memory/4392-37-0x0000000074390000-0x0000000074B40000-memory.dmp

    Filesize

    7.7MB

  • memory/4392-45-0x000000006F350000-0x000000006F4DD000-memory.dmp

    Filesize

    1.6MB

  • memory/4392-46-0x000000006F2E0000-0x000000006F34B000-memory.dmp

    Filesize

    428KB

  • memory/4392-48-0x0000000077070000-0x00000000770D3000-memory.dmp

    Filesize

    396KB

  • memory/4392-47-0x000000006F1F0000-0x000000006F2D3000-memory.dmp

    Filesize

    908KB

  • memory/4392-75-0x0000000000A70000-0x0000000000CAD000-memory.dmp

    Filesize

    2.2MB

  • memory/4392-76-0x0000000077130000-0x0000000077345000-memory.dmp

    Filesize

    2.1MB