Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 10:21

General

  • Target

    3610676cf0d883b415e3585aab0a65f4655ec333182367734b2b46b9b6f37083N.exe

  • Size

    140KB

  • MD5

    d95b90a0345ef0df2433cc94f529c790

  • SHA1

    df65518f544d028355b2989f5edbf76ec9927dd3

  • SHA256

    3610676cf0d883b415e3585aab0a65f4655ec333182367734b2b46b9b6f37083

  • SHA512

    e9040270c54d57d1eb93fb859dcd16436ea9fc8f6ce33519556cd9804e475e4982defbc7ec8a4e43243e11c8708348cd0029851f3e8850c8fa3d65f4815bd77b

  • SSDEEP

    3072:hs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/M/Fnncrd5971c:hDeM7iNEkgiOb31k1ECaJy5J

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3610676cf0d883b415e3585aab0a65f4655ec333182367734b2b46b9b6f37083N.exe
    "C:\Users\Admin\AppData\Local\Temp\3610676cf0d883b415e3585aab0a65f4655ec333182367734b2b46b9b6f37083N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1740

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\rifaien2-5QfjuQnFqlyRTvBW.exe

          Filesize

          140KB

          MD5

          c7dc6323646a999ebec1cc484fd6956c

          SHA1

          cdf493570b919b37a1af79a56aac447d5520a81b

          SHA256

          4a66d3e522d8001af9ac1c90f730373284f70f9cdcd11571037babba41d62428

          SHA512

          3dd6fd3bc9dc1b0c91cd5e6fa163272ba40ed0aba0bd9904d9abb484f3b8b5543f6c3a351d73a5e5b2a2d2fda366e3435017e53ee7552d255824cd1a7edf7382

        • memory/1740-0-0x0000000000400000-0x0000000000427000-memory.dmp

          Filesize

          156KB

        • memory/1740-4-0x0000000000400000-0x0000000000427000-memory.dmp

          Filesize

          156KB

        • memory/1740-11-0x0000000000400000-0x0000000000427000-memory.dmp

          Filesize

          156KB

        • memory/1740-21-0x0000000000400000-0x0000000000427000-memory.dmp

          Filesize

          156KB