Overview

overview

10

Static

static

10

release.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    48s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-12-2024 15:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    release.exe

  • Size

    423KB

  • MD5

    be4cbe10f071b583895eb48b532e837a

  • SHA1

    cf7fe65594aa9d74a23b35cb608c01e6a7912014

  • SHA256

    610f0ac7f61d0e450281941a5476f6316fa14ddd6fd06210029905246b56b0ef

  • SHA512

    7fbe0c286bebc18db0e46f17757ce824b643856d2d647eef8e9ec1d66c5af145bfdbac4904c2f494d1d6e4480fd96aaa7de7c66bfd1083c2d3a841c08b42e47a

  • SSDEEP

    6144:YeghbOV4Asvo/Z+wo6TmTIHnqgKIuTi5gTaWnLLDt1dbWAOaKapXFWbcF5U:YeKbOV4A3ho9IKNti5gT/wUzzWYU

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Runs .reg file with regedit 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\release.exe
    "C:\Users\Admin\AppData\Local\Temp\release.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:692
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2304
    • C:\Windows\regedit.exe
      "regedit.exe" "C:\Users\Admin\Downloads\StepExit.reg"
      1⤵
      • Runs .reg file with regedit
      PID:4716

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads