Analysis
-
max time kernel
80s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21/11/2024, 04:12
General
-
Target
EPM v14 Activator v1.1 - De!.exe
-
Size
1.4MB
-
MD5
9bdff46961aef386d4de5e2b1405dc40
-
SHA1
c6ef1ed87c331a8bd1cd1adaf5aa5d124d677bc3
-
SHA256
d8e43dfb7662e0eeb26821f5a6a8d9f8a5b351d1d1e769a516ed65b86144e605
-
SHA512
2651383f0fda8fe3c1ab7ea1335d1a0680b1bc52e33b4d66fab9fadf00f350e793392930c4a34838ec5fc98d1c92657a75170602b792158a88e3efcbc84feb8d
-
SSDEEP
24576:llwhPNBDi2j1/m9+8N5n+Rj4YM7D4OnvHIHeev9Gvxa6uG2g1uv:laNE2Jdm57YMI6voHhKR/71uv
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\EPM v14 Activator v1.1 - De!.exe"C:\Users\Admin\AppData\Local\Temp\EPM v14 Activator v1.1 - De!.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
2.2MB
-
Filesize
292KB
-
Filesize
4.1MB
-
Filesize
292KB
-
Filesize
12KB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
292KB
-
Filesize
2.2MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4.1MB