Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
17/02/2025, 21:45
General
-
Target
malware-sample-library-master/APT28 FancyBear/FancyBearZekapabImplant.exe
-
Size
785KB
-
MD5
d1755976a6f7e1cbf21132ac4fdcf553
-
SHA1
a4e6f56a67149cd1d96eb03317098188c8f673a1
-
SHA256
963c3bf38e90c2971e6875490e9d2393b9567f5cc3ee5e4c098b988bd2b852c5
-
SHA512
6a58f404feaec1f33b0ce2f0c87eac5939184bc33a069d1f66ee4602715ecbeb8604b9b0af5657eaccff7f97b8b911c6da6484c34aa7628945411e5bc7cbd8a8
-
SSDEEP
12288:9sFTxmLKQENZn8k+UYOHp2hh0nYsuCY2WmQCiDz/jaLRQq36GmXQfBWy:QUOQENik+uQhhUYqWmQCioiowy
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\malware-sample-library-master\APT28 FancyBear\FancyBearZekapabImplant.exe"C:\Users\Admin\AppData\Local\Temp\malware-sample-library-master\APT28 FancyBear\FancyBearZekapabImplant.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
824KB