Analysis

  • max time kernel
    140s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-11-2024 09:41

General

  • Target

    setup/AISetup-Crack.exe

  • Size

    2.4MB

  • MD5

    a6f2af8aa201a51b90ce7242736a7af4

  • SHA1

    303184b65412f10df9e3860a7b3337e165c820db

  • SHA256

    7e29a55958df55dcc4bb4e563111659226cdac60bc7141f8124acaa8eac66565

  • SHA512

    dd5271e62bb7f69b217ea912c378cccf41f4132efe48e4ac11fe04d6869d3db13cc52dd991507d1ba081b88bcbc8c96324a11d7a1623937be2a0403c353d7650

  • SSDEEP

    49152:P8QETEm8KR2frmN7o8cwa877IRgZVFiIFwDchf3fsmfNpF/t:M8KR2frmNja8vIRgZu6hf3fsmN/t

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup\AISetup-Crack.exe
    "C:\Users\Admin\AppData\Local\Temp\setup\AISetup-Crack.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1804-0-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-1-0x0000000002F60000-0x0000000002FA1000-memory.dmp

    Filesize

    260KB

  • memory/1804-4-0x0000000002F40000-0x0000000002F41000-memory.dmp

    Filesize

    4KB

  • memory/1804-3-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-6-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-5-0x0000000000192000-0x00000000001C3000-memory.dmp

    Filesize

    196KB

  • memory/1804-2-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-7-0x0000000076360000-0x0000000076575000-memory.dmp

    Filesize

    2.1MB

  • memory/1804-9-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-8-0x0000000075EB0000-0x0000000076131000-memory.dmp

    Filesize

    2.5MB

  • memory/1804-10-0x0000000076600000-0x00000000766E3000-memory.dmp

    Filesize

    908KB

  • memory/1804-11-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-12-0x0000000072DF0000-0x0000000072E79000-memory.dmp

    Filesize

    548KB

  • memory/1804-13-0x0000000076800000-0x0000000076DB3000-memory.dmp

    Filesize

    5.7MB

  • memory/1804-14-0x0000000005DA0000-0x00000000063B8000-memory.dmp

    Filesize

    6.1MB

  • memory/1804-15-0x0000000005830000-0x0000000005842000-memory.dmp

    Filesize

    72KB

  • memory/1804-16-0x0000000005960000-0x0000000005A6A000-memory.dmp

    Filesize

    1.0MB

  • memory/1804-17-0x0000000005890000-0x00000000058CC000-memory.dmp

    Filesize

    240KB

  • memory/1804-18-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-19-0x00000000058D0000-0x000000000591C000-memory.dmp

    Filesize

    304KB

  • memory/1804-20-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB

  • memory/1804-21-0x0000000002F60000-0x0000000002FA1000-memory.dmp

    Filesize

    260KB

  • memory/1804-24-0x0000000076140000-0x0000000076164000-memory.dmp

    Filesize

    144KB

  • memory/1804-25-0x0000000077150000-0x00000000771CB000-memory.dmp

    Filesize

    492KB

  • memory/1804-26-0x0000000076E60000-0x0000000076F80000-memory.dmp

    Filesize

    1.1MB

  • memory/1804-23-0x0000000076360000-0x0000000076575000-memory.dmp

    Filesize

    2.1MB

  • memory/1804-27-0x0000000075620000-0x00000000756DF000-memory.dmp

    Filesize

    764KB

  • memory/1804-28-0x0000000075DF0000-0x0000000075EAF000-memory.dmp

    Filesize

    764KB

  • memory/1804-30-0x00000000752E0000-0x0000000075332000-memory.dmp

    Filesize

    328KB

  • memory/1804-32-0x0000000076310000-0x0000000076355000-memory.dmp

    Filesize

    276KB

  • memory/1804-35-0x0000000074B10000-0x0000000074B18000-memory.dmp

    Filesize

    32KB

  • memory/1804-34-0x0000000074B20000-0x0000000074B2F000-memory.dmp

    Filesize

    60KB

  • memory/1804-31-0x0000000075EB0000-0x0000000076131000-memory.dmp

    Filesize

    2.5MB

  • memory/1804-33-0x0000000074B30000-0x0000000074BBD000-memory.dmp

    Filesize

    564KB

  • memory/1804-38-0x0000000074290000-0x000000007433B000-memory.dmp

    Filesize

    684KB

  • memory/1804-40-0x0000000072DF0000-0x0000000072E79000-memory.dmp

    Filesize

    548KB

  • memory/1804-42-0x0000000076700000-0x0000000076719000-memory.dmp

    Filesize

    100KB

  • memory/1804-41-0x0000000076DC0000-0x0000000076E56000-memory.dmp

    Filesize

    600KB

  • memory/1804-45-0x000000006F2B0000-0x000000006F31B000-memory.dmp

    Filesize

    428KB

  • memory/1804-47-0x0000000076F80000-0x0000000076FE3000-memory.dmp

    Filesize

    396KB

  • memory/1804-46-0x000000006F1C0000-0x000000006F2A3000-memory.dmp

    Filesize

    908KB

  • memory/1804-44-0x000000006F320000-0x000000006F4AD000-memory.dmp

    Filesize

    1.6MB

  • memory/1804-39-0x0000000076600000-0x00000000766E3000-memory.dmp

    Filesize

    908KB

  • memory/1804-37-0x0000000074340000-0x0000000074354000-memory.dmp

    Filesize

    80KB

  • memory/1804-36-0x0000000074360000-0x0000000074B10000-memory.dmp

    Filesize

    7.7MB

  • memory/1804-43-0x000000006F4B0000-0x000000006F6C0000-memory.dmp

    Filesize

    2.1MB

  • memory/1804-75-0x0000000076360000-0x0000000076575000-memory.dmp

    Filesize

    2.1MB

  • memory/1804-74-0x0000000000190000-0x00000000003D8000-memory.dmp

    Filesize

    2.3MB