Analysis

  • max time kernel
    93s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-01-2025 12:15

General

  • Target

    EnableLoopback.exe

  • Size

    82KB

  • MD5

    81564947d42846910eec2d08310e0d25

  • SHA1

    b7a167dcd3afb29c8a0e18c943d634e3fc58a44c

  • SHA256

    543f16b73f7d40177585332f433ce76dddc1526e12bcd62cb73edd11eb002341

  • SHA512

    8f06409517697b022787bc9e2ed7e73100018422177aa3f63ecb406c3bdb6b021624f909a16fca0430002bfa7d35a461b38750c79c0273a154f63316b4e13037

  • SSDEEP

    768:AREI16zcI2eupxmhm/ljPb0O7/Al25znrShUABg4CqnZx6qmmlkoxPLabCxf1mlr:y1HLdwOLFzrShURwZoxmlkoxDtfIIM

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\EnableLoopback.exe
    "C:\Users\Admin\AppData\Local\Temp\EnableLoopback.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    PID:2836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2836-0-0x0000000074D4E000-0x0000000074D4F000-memory.dmp

    Filesize

    4KB

  • memory/2836-1-0x0000000000220000-0x0000000000238000-memory.dmp

    Filesize

    96KB

  • memory/2836-2-0x0000000005320000-0x00000000058C4000-memory.dmp

    Filesize

    5.6MB

  • memory/2836-3-0x0000000004C20000-0x0000000004CB2000-memory.dmp

    Filesize

    584KB

  • memory/2836-4-0x00000000050B0000-0x00000000050BA000-memory.dmp

    Filesize

    40KB

  • memory/2836-5-0x0000000074D40000-0x00000000754F0000-memory.dmp

    Filesize

    7.7MB

  • memory/2836-6-0x0000000074D40000-0x00000000754F0000-memory.dmp

    Filesize

    7.7MB

  • memory/2836-7-0x0000000074D4E000-0x0000000074D4F000-memory.dmp

    Filesize

    4KB

  • memory/2836-8-0x0000000074D40000-0x00000000754F0000-memory.dmp

    Filesize

    7.7MB