Analysis

  • max time kernel
    1771s
  • max time network
    1561s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    22-11-2024 02:21

General

  • Target

    46ca6b1972c81eab77202146184afe95b797bd4e3788c59e8036e748b55fc28c_Dumped_TDS=4FB252FB.exe

  • Size

    72KB

  • MD5

    2f862bf4b81d28ad47473982828040bd

  • SHA1

    eae46ba66a32e1e6a2d25f7a6f59e3c7d5262133

  • SHA256

    e9e3c177d2985cde769b405789d1aa7cf8ed76de6da1d5f7bf89b8bc7d940bf6

  • SHA512

    6f1961e05266c16eaf4dc7f10749347c23970c08bc5b80457be347a60e4f0c2b85df56b6d1be702758f6d807fdf4c31ec1e4b9faa40574ac4c60585b45282790

  • SSDEEP

    768:e+X2MKhRw7+am7nx3h1OPG0H+l65Fuj0AjmWTbsbIK9QnjVP9xPao1X7tiHCQ+r:e4KIqamtRMPJQoh2mqxTnjVPqiQ

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

Processes

  • C:\Users\Admin\AppData\Local\Temp\46ca6b1972c81eab77202146184afe95b797bd4e3788c59e8036e748b55fc28c_Dumped_TDS=4FB252FB.exe
    "C:\Users\Admin\AppData\Local\Temp\46ca6b1972c81eab77202146184afe95b797bd4e3788c59e8036e748b55fc28c_Dumped_TDS=4FB252FB.exe"
    1⤵
    • Checks computer location settings
    PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\zvornwheuqtztwc

    Filesize

    52B

    MD5

    42929400399874f7473be82c33b3f174

    SHA1

    0041d95b7397b2046de3d129b108a6a426b4742d

    SHA256

    2be2ab63d2f98aef266eb174f4a26f6d9df098cfdd215dbecca9507917d47d1e

    SHA512

    118c89a1752d5d9c48de652ef69e515b0eeabdc7e282896de85718d8dd41f7048c728c331993000abc5b780c15380d0e86b1a1737d64fc2631e1feb17847d810

  • memory/2720-0-0x00000000010A0000-0x00000000010B2000-memory.dmp

    Filesize

    72KB

  • memory/2720-4-0x00000000010A0000-0x00000000010B2000-memory.dmp

    Filesize

    72KB