Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/11/2024, 19:46

General

  • Target

    6afe508e15ad8da1e808a86a3b95972635be7cc1c6e77ac9ef4f1588b3fab9c8N.exe

  • Size

    468KB

  • MD5

    3636dfbd49de4ee27b5a93aa0034efa0

  • SHA1

    a8c50919adbd343e5edc54bcc6e91fb32db997ef

  • SHA256

    6afe508e15ad8da1e808a86a3b95972635be7cc1c6e77ac9ef4f1588b3fab9c8

  • SHA512

    59b0700a6735c3323cf87217eff5208e3755bf4696367db6b088ba88730e37c59f51b4d321371253e48ca59efc901c89c0ea651e9cce7fd10dd2b00723f814c4

  • SSDEEP

    3072:vAaOogBcjq8JMbY2Pl3ycft/aTxjgIBRNmHxATWJ2sn6HIUvNEPl5:vA3oHTJMRP9ycf3sCb2s61vNE

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6afe508e15ad8da1e808a86a3b95972635be7cc1c6e77ac9ef4f1588b3fab9c8N.exe
    "C:\Users\Admin\AppData\Local\Temp\6afe508e15ad8da1e808a86a3b95972635be7cc1c6e77ac9ef4f1588b3fab9c8N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2028

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2028-0-0x0000000000400000-0x0000000000475000-memory.dmp

          Filesize

          468KB

        • memory/2028-1-0x0000000000400000-0x0000000000475000-memory.dmp

          Filesize

          468KB