Analysis

  • max time kernel
    93s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 15:24

General

  • Target

    826950eebf1993ae95a0b2da24ce682d4c62fd6136eecd632642507575e88f43.exe

  • Size

    468KB

  • MD5

    34bfaced3f491ebdcc152b3e4789cf54

  • SHA1

    056162d4950d0a943fa2cbc55474057420ef22ea

  • SHA256

    826950eebf1993ae95a0b2da24ce682d4c62fd6136eecd632642507575e88f43

  • SHA512

    3790cad44b4396e2ff5e7c572f3e131f517fe0b4ff7b21daa16d97489e12c9e63d6d09ff63028f1f055857568f25f9bf16f966fa009d547158ad570707cdeb90

  • SSDEEP

    3072:juTobKxjtAUebYXBz3yqf8/bCnJhIpD6mfIGVBZD3YJkO1NhLla0:j+ooaUeABDyqfx026D38T1NhB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\826950eebf1993ae95a0b2da24ce682d4c62fd6136eecd632642507575e88f43.exe
    "C:\Users\Admin\AppData\Local\Temp\826950eebf1993ae95a0b2da24ce682d4c62fd6136eecd632642507575e88f43.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4964-0-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB

  • memory/4964-1-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB