Analysis

  • max time kernel
    1561s
  • max time network
    1569s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13-12-2024 22:18

General

  • Target

    The-MALWARE-Repo-master/rogues/SpySheriff.exe

  • Size

    48KB

  • MD5

    ab3e43a60f47a98962d50f2da0507df7

  • SHA1

    4177228a54c15ac42855e87854d4cd9a1722fe39

  • SHA256

    4f5f0d9a2b6ef077402a17136ff066dda4c8175ceb6086877aaa3570cabb638f

  • SHA512

    9e3365c7860c4766091183d633462f1cc8c30d28871ae2cd8a9a086ce61c0bccf457f919db6826b708f0cf4f88e90f71185420edc4756b7d70137e2096f8797f

  • SSDEEP

    768:18Gch4aqHnKckG0HrloMOInk3RicH0wDrF5X9gFEvkk3p:1hN/k/ZomkhewDR5NVvkk3p

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\rogues\SpySheriff.exe
    "C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\rogues\SpySheriff.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3044-0-0x0000000000400000-0x000000000040E000-memory.dmp

    Filesize

    56KB

  • memory/3044-1-0x0000000000400000-0x000000000040E000-memory.dmp

    Filesize

    56KB