Analysis

  • max time kernel
    437s
  • max time network
    438s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    25-12-2024 17:32

General

  • Target

    Mono Executor Final/Debug/MonBeta.exe

  • Size

    185KB

  • MD5

    a60ac99bc102893ac421e220dd883433

  • SHA1

    e30724c7f6e5570ab84a8b6bf98b3e99b8e3b037

  • SHA256

    ca3c98a760b98f855c8c0cfad1e17190fe332fc5aa9d51d8194b3092b64f4731

  • SHA512

    cac1df99f3dbb10c02849f7b1214150add4fa124010a0416a30ff64aa54f9148e778730f4aa69bf37be8d25aad9ffa35d870a4d7469bff26a13c75a92fcad592

  • SSDEEP

    3072:283SWl8GF6Nl+dl2a4ZWeDtYW5nuQjjOs44kdqshAcmMcI:283z85YlqhR9u2vMsInV

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Mono Executor Final\Debug\MonBeta.exe
    "C:\Users\Admin\AppData\Local\Temp\Mono Executor Final\Debug\MonBeta.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Enumerates system info in registry
    PID:4532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4532-0-0x00000000745FE000-0x00000000745FF000-memory.dmp

    Filesize

    4KB

  • memory/4532-1-0x0000000000280000-0x00000000002B4000-memory.dmp

    Filesize

    208KB

  • memory/4532-2-0x0000000005230000-0x00000000057D6000-memory.dmp

    Filesize

    5.6MB

  • memory/4532-3-0x0000000004D20000-0x0000000004DB2000-memory.dmp

    Filesize

    584KB

  • memory/4532-5-0x0000000004CC0000-0x0000000004CCA000-memory.dmp

    Filesize

    40KB

  • memory/4532-4-0x00000000745F0000-0x0000000074DA1000-memory.dmp

    Filesize

    7.7MB

  • memory/4532-6-0x00000000061E0000-0x00000000063F2000-memory.dmp

    Filesize

    2.1MB

  • memory/4532-7-0x0000000006400000-0x0000000006458000-memory.dmp

    Filesize

    352KB

  • memory/4532-8-0x00000000745F0000-0x0000000074DA1000-memory.dmp

    Filesize

    7.7MB

  • memory/4532-9-0x00000000745FE000-0x00000000745FF000-memory.dmp

    Filesize

    4KB

  • memory/4532-10-0x00000000745F0000-0x0000000074DA1000-memory.dmp

    Filesize

    7.7MB