Resubmissions

12-01-2025 13:59

250112-ran7waxpaj 10

12-01-2025 13:48

250112-q38asavke1 10

12-01-2025 13:44

250112-q114paxlan 10

12-01-2025 13:37

250112-qw2jnaxjcl 10

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2025 13:37

General

  • Target

    AxoPac/x64/bin/javaw.exe

  • Size

    187KB

  • MD5

    48c96771106dbdd5d42bba3772e4b414

  • SHA1

    e84749b99eb491e40a62ed2e92e4d7a790d09273

  • SHA256

    a96d26428942065411b1b32811afd4c5557c21f1d9430f3696aa2ba4c4ac5f22

  • SHA512

    9f891c787eb8ceed30a4e16d8e54208fa9b19f72eeec55b9f12d30dc8b63e5a798a16b1ccc8cea3e986191822c4d37aedb556e534d2eb24e4a02259555d56a2c

  • SSDEEP

    3072:lScg0xvhTZNIs3Ft+STckCBQo3C0Y22vncTBfsO9jZqMN3cH1Tefqk:lSclI6nTc3BQo3C0YHncTBxvs65

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javaw.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2388

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2388-3-0x0000000002660000-0x0000000002688000-memory.dmp

    Filesize

    160KB

  • memory/2388-9-0x00000000026A8000-0x00000000026B0000-memory.dmp

    Filesize

    32KB

  • memory/2388-12-0x00000000026B0000-0x00000000026B8000-memory.dmp

    Filesize

    32KB

  • memory/2388-29-0x0000000002698000-0x00000000026A0000-memory.dmp

    Filesize

    32KB

  • memory/2388-31-0x00000000026A0000-0x00000000026A8000-memory.dmp

    Filesize

    32KB

  • memory/2388-30-0x0000000002700000-0x0000000002708000-memory.dmp

    Filesize

    32KB

  • memory/2388-28-0x00000000026F8000-0x0000000002700000-memory.dmp

    Filesize

    32KB

  • memory/2388-33-0x0000000002708000-0x0000000002710000-memory.dmp

    Filesize

    32KB

  • memory/2388-35-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2388-36-0x0000000002660000-0x0000000002688000-memory.dmp

    Filesize

    160KB

  • memory/2388-41-0x0000000002708000-0x0000000002710000-memory.dmp

    Filesize

    32KB

  • memory/2388-40-0x0000000002700000-0x0000000002708000-memory.dmp

    Filesize

    32KB

  • memory/2388-39-0x0000000002698000-0x00000000026A0000-memory.dmp

    Filesize

    32KB

  • memory/2388-38-0x00000000026B0000-0x00000000026B8000-memory.dmp

    Filesize

    32KB

  • memory/2388-37-0x00000000026A8000-0x00000000026B0000-memory.dmp

    Filesize

    32KB