2fceaf38bbbf6ac8f6f6dcc18da1e3c6392d78555e3a60c77360fe0f6fe6a61b

Analysis

max time kernel
117s
max time network
125s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27-07-2024 04:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

90ff3b6c6dde27bf3bb9bd3e17d9ee10N.exe
Size

102KB
MD5

90ff3b6c6dde27bf3bb9bd3e17d9ee10
SHA1

b70f76ac779dcba1e5b0eaf4a72fe1b78b52ee35
SHA256

2fceaf38bbbf6ac8f6f6dcc18da1e3c6392d78555e3a60c77360fe0f6fe6a61b
SHA512

a08451450e09bd4c1568a39aa20aeb7f2f10f33343365ad9f871fe4fdf3d7f896df5a4b3a5e18d4e71ab9dd2deb0d678ac20e708f910f276674ec51dfbbf5cb3
SSDEEP

768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyp:CzqsQ5PIt4+/yfeB6r6YcOik5h36lB4J

Score

7^/10

discovery upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
behavioral1/memory/2360-0-0x0000000000400000-0x000000000041B000-memory.dmp	upx
C:\My Downloads\CloneCD ISO - Full Downloader.exe	upx
behavioral1/memory/2360-101-0x0000000000400000-0x000000000041B000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

90ff3b6c6dde27bf3bb9bd3e17d9ee10N.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 90ff3b6c6dde27bf3bb9bd3e17d9ee10N.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	90ff3b6c6dde27bf3bb9bd3e17d9ee10N.exe

C:\Users\Admin\AppData\Local\Temp\90ff3b6c6dde27bf3bb9bd3e17d9ee10N.exe
"C:\Users\Admin\AppData\Local\Temp\90ff3b6c6dde27bf3bb9bd3e17d9ee10N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2360

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\My Downloads\CloneCD ISO - Full Downloader.exe
Filesize
102KB

MD5
b242a29d35e405800e2c835c2f3dc0c0

SHA1
b57226be12c6eb4bc6277c27191a466f3aa935d0

SHA256
6020e0a78be205c3e6dac81aeb454c47ca469a326916ee6343e1aad808679646

SHA512
cef82c46b64434ce99033d527183b89a0818a3b009b0fc65b7f8455e3f2fbb4d5aac778faaea00b8e9c622cb41ce9f0cef7a751792e799aac3e97b5006f02d48

Download Submit
memory/2360-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2360-101-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download