Analysis

  • max time kernel
    94s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 18:42

General

  • Target

    95c4866754e39d742e70f9343213aff0f5b823dbf3e7180fa452090d6c80d2eaN.exe

  • Size

    468KB

  • MD5

    7efe8ec2140c3b62c1317467ef108f40

  • SHA1

    da9c6629b8984a066c0d62f2d82c34d57b4e1ac7

  • SHA256

    95c4866754e39d742e70f9343213aff0f5b823dbf3e7180fa452090d6c80d2ea

  • SHA512

    8b76989ccf9205ee01a598121041aee70ae66b76ab7f48309f60a2a082eba52faa4b828329fd2419fef86bf909a801473a33bbe19ece6f74aff3036301d0b591

  • SSDEEP

    3072:3OH9ogFxjiTU2bYSBzXy0fh3EZ3LOBp/PmfI5Vws4YwLLt4v6SIu:3OdoWUU2hBjy0fPnv54YKR4v6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\95c4866754e39d742e70f9343213aff0f5b823dbf3e7180fa452090d6c80d2eaN.exe
    "C:\Users\Admin\AppData\Local\Temp\95c4866754e39d742e70f9343213aff0f5b823dbf3e7180fa452090d6c80d2eaN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2468-0-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB

  • memory/2468-1-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB