Resubmissions

04-01-2025 21:52

250104-1q8e5a1mck 10

26-07-2021 18:55

210726-t46btfv4we 10

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-01-2025 21:52

General

  • Target

    budha.exe

  • Size

    976KB

  • MD5

    6b17dc41af237a907601c74f89877c49

  • SHA1

    4c711e565bdff797cb75e795a75b8c6a41df22a7

  • SHA256

    be9431058a7e773c7012df0a7c24653932d0ea1eac0daa9a7b8e4192dfc45d3e

  • SHA512

    31ecf869475d35ba6836d74d837ef63fa9b32fe6675dff068d03187007735437575b3ba8af083e8eb322d27e580d9c9d16f510b1d4936de5e1fe8231956f6fef

  • SSDEEP

    24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxp:bJ5gEKNikf3hBfUiWxp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\budha.exe
    "C:\Users\Admin\AppData\Local\Temp\budha.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4944-0-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/4944-1-0x00000000022F0000-0x00000000022F1000-memory.dmp

    Filesize

    4KB

  • memory/4944-2-0x0000000002640000-0x0000000002A40000-memory.dmp

    Filesize

    4.0MB

  • memory/4944-9-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB