Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    20-11-2024 19:28

General

  • Target

    cf8db7212e45eb2db7593efdb294069ea6bfee32dc77f551b9cfcb5ee9ec069a.exe

  • Size

    362KB

  • MD5

    1b3c135d4e0f20b67ef9014623891ea5

  • SHA1

    04fd278709f419ac13d260e2a1abe689ac5b5579

  • SHA256

    cf8db7212e45eb2db7593efdb294069ea6bfee32dc77f551b9cfcb5ee9ec069a

  • SHA512

    b2252bf27c3071a44771189f6b2ae4a4ef05615cc01964ed33188b9a2a9890812b8150d8f3c30257ebebfeb0b8150ff838b65a4687363ef4a54fdbe842b3ec6c

  • SSDEEP

    6144:6zCUWZNi1IRsSdwqqo3lkpF7p3PHHQ21wIxyEqlnVj19OAqyN2CVLJj2vpw3qmNu:oC8MKqfVkT7aIxyEqpV9NkkqmNIxhc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf8db7212e45eb2db7593efdb294069ea6bfee32dc77f551b9cfcb5ee9ec069a.exe
    "C:\Users\Admin\AppData\Local\Temp\cf8db7212e45eb2db7593efdb294069ea6bfee32dc77f551b9cfcb5ee9ec069a.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\msvcp110.dll

    Filesize

    566KB

    MD5

    35b0cd8a1a641b9b2e2b0d3ca1cc92f7

    SHA1

    dc46156005c99d5b4151e06c35264fe3905838dd

    SHA256

    013b2d6a316aaa2da34212505403e4d558933e39b0d56a1ca9e4ddbffe1cc356

    SHA512

    156756971bb732fe5e7f34ba441ed783740dad697927a0fee959e13b3b89a6c11afe7103e0d03ceb4775719185f6ee00deead458f95d6d351a73d9e21b04e96e

  • memory/2272-0-0x000000007408E000-0x000000007408F000-memory.dmp

    Filesize

    4KB

  • memory/2272-1-0x0000000000CF0000-0x0000000000D52000-memory.dmp

    Filesize

    392KB

  • memory/2272-2-0x0000000000220000-0x0000000000226000-memory.dmp

    Filesize

    24KB

  • memory/2272-7-0x0000000074080000-0x000000007476E000-memory.dmp

    Filesize

    6.9MB

  • memory/2272-8-0x0000000074080000-0x000000007476E000-memory.dmp

    Filesize

    6.9MB