4eab9d4f3585d69314ac8b356951530b3ce81641d388980905e78849aef09315

Analysis

max time kernel
94s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
02/08/2024, 06:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6d9aec3d0399aef0a77327ec742b1190N.exe
Size

101KB
MD5

6d9aec3d0399aef0a77327ec742b1190
SHA1

86be7ee2831bb4d54ab2d7328b989fb6adffd84c
SHA256

4eab9d4f3585d69314ac8b356951530b3ce81641d388980905e78849aef09315
SHA512

5ea14c7940f95138e3224dceea28f555dc1d3b8e29f1db83cdd63b03477515c9039d4d5dc2e9987e1ed401a279355fe5b666a2c74e0f3bd6c33b09ba90beeb9a
SSDEEP

768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAym:CzqsQ5PIt4+/yfeB6r6YcOik5h36lB4G

Score

7^/10

discovery upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2428-0-0x0000000000400000-0x000000000041B000-memory.dmp	upx
behavioral2/files/0x000a000000023409-5.dat	upx
behavioral2/memory/2428-101-0x0000000000400000-0x000000000041B000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6d9aec3d0399aef0a77327ec742b1190N.exe

C:\Users\Admin\AppData\Local\Temp\6d9aec3d0399aef0a77327ec742b1190N.exe
"C:\Users\Admin\AppData\Local\Temp\6d9aec3d0399aef0a77327ec742b1190N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2428

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\My Downloads\Macromedia ISO - Full Downloader.exe

Filesize
101KB

MD5
ed903bbc8d37baad46fa43f337e2f7f9

SHA1
c86891ace194cba1f54558ffcd47922cc3cc818c

SHA256
b4dcb5e86e77bb1d5afe0b38cdaf1620889ca4a622130f8c309b48cd8146d618

SHA512
0d0908e17818695be44a27bca50aca38837fab24af2a6ee5af08249dc01c2f8b8049e880d18373944dc5044a34c7c9322f1df6207a259c6b45c52344673a0ea3

Download Submit
memory/2428-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2428-101-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download