Analysis

  • max time kernel
    96s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 14:02

General

  • Target

    1d813cee189ef6f5a3f9f15855df07d0d3223cc83ecb9d6e1d2f1433afce259e.exe

  • Size

    294KB

  • MD5

    0e76db2e9a966e98ad65a7c690d8a9f8

  • SHA1

    8ef3c265a0fc9ea4bae4800b990f859e72747c53

  • SHA256

    1d813cee189ef6f5a3f9f15855df07d0d3223cc83ecb9d6e1d2f1433afce259e

  • SHA512

    6d652e2f0ef1e98e2eb7bd23f356b137cc1751b9d3bbc7cb71ee778eb9c1e25ec4ff2f66fbae24c96a3965478c7ee35ed859c53dfc9467cd40744d75909b3c30

  • SSDEEP

    3072:q2PbdqMZ4JdFyMyLkFYEgEztKIL0uAARdH/iGZSNykmocCROVqNig6:xPbd9sHyIFD9YAky2IqND6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1d813cee189ef6f5a3f9f15855df07d0d3223cc83ecb9d6e1d2f1433afce259e.exe
    "C:\Users\Admin\AppData\Local\Temp\1d813cee189ef6f5a3f9f15855df07d0d3223cc83ecb9d6e1d2f1433afce259e.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4776-0-0x0000000000C50000-0x0000000000C88000-memory.dmp

    Filesize

    224KB