Overview

overview

7

Static

static

7

c05522cc6b...5a.exe

windows7-x64

3

c05522cc6b...5a.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-11-2024 21:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c05522cc6ba75ddb0561960718d6f00287e1eb68a42bd061d016adeb465e615a.exe

  • Size

    136KB

  • MD5

    ab993ad3a63a6533cc37b66106de61ea

  • SHA1

    16ce0388a991bcd284b28aa902f2d01fa5772043

  • SHA256

    c05522cc6ba75ddb0561960718d6f00287e1eb68a42bd061d016adeb465e615a

  • SHA512

    702b617c80668fa36a617926465c2ef00eb144ff86894db0efc4a3fc5e0f96616f95c439379ad202fe074babd6cb248ef767142ff053b8a3fe42e4cda92f2b6a

  • SSDEEP

    1536:jOgVPwzJWY1urHjjwJDxg0trb8jJzPnGC/s+BXLE+ptlf26WLpflZf:jRwkYQPwtxZMhPGClgWjSvZf

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c05522cc6ba75ddb0561960718d6f00287e1eb68a42bd061d016adeb465e615a.exe
    "C:\Users\Admin\AppData\Local\Temp\c05522cc6ba75ddb0561960718d6f00287e1eb68a42bd061d016adeb465e615a.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:1868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1868-0-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-3-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-2-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-1-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-4-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-5-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-6-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-7-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-8-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-9-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-10-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-11-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-12-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-13-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-14-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-15-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download

  • memory/1868-16-0x0000000000FD0000-0x000000000105C000-memory.dmp

    Filesize

    560KB

    Download