Resubmissions
12/12/2024, 19:07
241212-xs6grswlhj1012/12/2024, 19:07
241212-xsna7awlfl1011/12/2024, 12:57
241211-p6934stkhw1008/12/2024, 12:52
241208-p34f6ayngj1008/12/2024, 12:51
241208-p3y7fatpe11008/12/2024, 12:48
241208-p133lstpbw10Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
08/12/2024, 12:48
General
- Target builder.exe
- Size 10KB
- Sample241208-p133lstpbw
- SHA256 ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\builder.exe"C:\Users\Admin\AppData\Local\Temp\builder.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3536-0-0x0000000074BEE000-0x0000000074BEF000-memory.dmp
memory/3536-1-0x0000000000740000-0x0000000000748000-memory.dmp
memory/3536-2-0x0000000005760000-0x0000000005D04000-memory.dmp
memory/3536-3-0x00000000051B0000-0x0000000005242000-memory.dmp
memory/3536-4-0x0000000074BE0000-0x0000000075390000-memory.dmp
memory/3536-5-0x0000000005140000-0x000000000514A000-memory.dmp
memory/3536-6-0x0000000074BEE000-0x0000000074BEF000-memory.dmp
memory/3536-7-0x0000000074BE0000-0x0000000075390000-memory.dmp