Resubmissions

12-01-2025 13:59

250112-ran7waxpaj 10

12-01-2025 13:48

250112-q38asavke1 10

12-01-2025 13:44

250112-q114paxlan 10

12-01-2025 13:37

250112-qw2jnaxjcl 10

Analysis

  • max time kernel
    148s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-01-2025 13:37

General

  • Target

    AxoPac/x64/bin/javaw.exe

  • Size

    187KB

  • MD5

    48c96771106dbdd5d42bba3772e4b414

  • SHA1

    e84749b99eb491e40a62ed2e92e4d7a790d09273

  • SHA256

    a96d26428942065411b1b32811afd4c5557c21f1d9430f3696aa2ba4c4ac5f22

  • SHA512

    9f891c787eb8ceed30a4e16d8e54208fa9b19f72eeec55b9f12d30dc8b63e5a798a16b1ccc8cea3e986191822c4d37aedb556e534d2eb24e4a02259555d56a2c

  • SSDEEP

    3072:lScg0xvhTZNIs3Ft+STckCBQo3C0Y22vncTBfsO9jZqMN3cH1Tefqk:lSclI6nTc3BQo3C0YHncTBxvs65

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javaw.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1392-5-0x0000000002580000-0x00000000025A8000-memory.dmp

    Filesize

    160KB

  • memory/1392-9-0x00000000025C8000-0x00000000025D0000-memory.dmp

    Filesize

    32KB

  • memory/1392-12-0x00000000025D0000-0x00000000025D8000-memory.dmp

    Filesize

    32KB

  • memory/1392-29-0x0000000002620000-0x0000000002628000-memory.dmp

    Filesize

    32KB

  • memory/1392-33-0x0000000002628000-0x0000000002630000-memory.dmp

    Filesize

    32KB

  • memory/1392-32-0x0000000002618000-0x0000000002620000-memory.dmp

    Filesize

    32KB

  • memory/1392-31-0x00000000025C0000-0x00000000025C8000-memory.dmp

    Filesize

    32KB

  • memory/1392-30-0x00000000025B8000-0x00000000025C0000-memory.dmp

    Filesize

    32KB

  • memory/1392-35-0x0000000002360000-0x0000000002361000-memory.dmp

    Filesize

    4KB

  • memory/1392-40-0x0000000002628000-0x0000000002630000-memory.dmp

    Filesize

    32KB

  • memory/1392-39-0x00000000025B8000-0x00000000025C0000-memory.dmp

    Filesize

    32KB

  • memory/1392-38-0x00000000025D0000-0x00000000025D8000-memory.dmp

    Filesize

    32KB

  • memory/1392-37-0x00000000025C8000-0x00000000025D0000-memory.dmp

    Filesize

    32KB

  • memory/1392-36-0x0000000002580000-0x00000000025A8000-memory.dmp

    Filesize

    160KB