Overview
overview
10Static
static
10R D X E 6 5.rar
windows10-2004-x64
3R D X E 6 ...nt.exe
windows10-2004-x64
3R D X E 6 ...or.exe
windows10-2004-x64
10$TEMP/Coated
windows10-2004-x64
1$TEMP/Extensive
windows10-2004-x64
1$TEMP/Franklin
windows10-2004-x64
1$TEMP/Gmt
windows10-2004-x64
1AdelaideMumbai/Dildos
windows10-2004-x64
1AdelaideMu...rrings
windows10-2004-x64
1AdelaideMumbai/Form
windows10-2004-x64
1AdelaideMumbai/Pads
windows10-2004-x64
1AlikeIraqi...bility
windows10-2004-x64
1AlikeIraqi/Establish
windows10-2004-x64
1AlikeIraqi...ations
windows10-2004-x64
1AlikeIraqi/Partition
windows10-2004-x64
1AlikeIraqi/Racial
windows10-2004-x64
1AsCamera/Sharing
windows10-2004-x64
1DownArising/Appliance
windows10-2004-x64
1DownArising/Freebsd
windows10-2004-x64
1DownArising/Guard
windows10-2004-x64
1DownArising/Min
windows10-2004-x64
1DownArisin...eption
windows10-2004-x64
1DownArising/Phantom
windows10-2004-x64
1DownArising/Realized
windows10-2004-x64
1DownArising/Serving
windows10-2004-x64
1DownArisin...etical
windows10-2004-x64
1ImLogin/Civil
windows10-2004-x64
1ImLogin/Destroy
windows10-2004-x64
1ImLogin/Fully
windows10-2004-x64
1R D X E 6 5/ai.cfg
windows10-2004-x64
3R D X E 6 ...rt.pem
windows10-2004-x64
3R D X E 6 ...ig.vdf
windows10-2004-x64
3Analysis
-
max time kernel
1758s -
max time network
1155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
02-08-2024 07:06
Behavioral task
behavioral1
Sample
R D X E 6 5.rar
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
R D X E 6 5/Client.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
R D X E 6 5/Roblox Executor.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral4
Sample
$TEMP/Coated
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
$TEMP/Extensive
Resource
win10v2004-20240730-en
Behavioral task
behavioral6
Sample
$TEMP/Franklin
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
$TEMP/Gmt
Resource
win10v2004-20240730-en
Behavioral task
behavioral8
Sample
AdelaideMumbai/Dildos
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
AdelaideMumbai/Earrings
Resource
win10v2004-20240730-en
Behavioral task
behavioral10
Sample
AdelaideMumbai/Form
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
AdelaideMumbai/Pads
Resource
win10v2004-20240730-en
Behavioral task
behavioral12
Sample
AlikeIraqi/Compatibility
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
AlikeIraqi/Establish
Resource
win10v2004-20240730-en
Behavioral task
behavioral14
Sample
AlikeIraqi/Negotiations
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
AlikeIraqi/Partition
Resource
win10v2004-20240730-en
Behavioral task
behavioral16
Sample
AlikeIraqi/Racial
Resource
win10v2004-20240730-en
Behavioral task
behavioral17
Sample
AsCamera/Sharing
Resource
win10v2004-20240730-en
Behavioral task
behavioral18
Sample
DownArising/Appliance
Resource
win10v2004-20240730-en
Behavioral task
behavioral19
Sample
DownArising/Freebsd
Resource
win10v2004-20240730-en
Behavioral task
behavioral20
Sample
DownArising/Guard
Resource
win10v2004-20240730-en
Behavioral task
behavioral21
Sample
DownArising/Min
Resource
win10v2004-20240730-en
Behavioral task
behavioral22
Sample
DownArising/Perception
Resource
win10v2004-20240730-en
Behavioral task
behavioral23
Sample
DownArising/Phantom
Resource
win10v2004-20240730-en
Behavioral task
behavioral24
Sample
DownArising/Realized
Resource
win10v2004-20240730-en
Behavioral task
behavioral25
Sample
DownArising/Serving
Resource
win10v2004-20240730-en
Behavioral task
behavioral26
Sample
DownArising/Theoretical
Resource
win10v2004-20240730-en
Behavioral task
behavioral27
Sample
ImLogin/Civil
Resource
win10v2004-20240730-en
Behavioral task
behavioral28
Sample
ImLogin/Destroy
Resource
win10v2004-20240730-en
Behavioral task
behavioral29
Sample
ImLogin/Fully
Resource
win10v2004-20240730-en
Behavioral task
behavioral30
Sample
R D X E 6 5/ai.cfg
Resource
win10v2004-20240730-en
Behavioral task
behavioral31
Sample
R D X E 6 5/cacert.pem
Resource
win10v2004-20240730-en
Behavioral task
behavioral32
Sample
R D X E 6 5/config.vdf
Resource
win10v2004-20240730-en
General
-
Target
R D X E 6 5/Client.exe
-
Size
33.0MB
-
MD5
157bca5bfbab154797fbbe947946084f
-
SHA1
280096391abd2ea592198d205b6e44cdd2408121
-
SHA256
f9aae2ca83d60ae3a6e443d23c91672cda766f73003e4f3f0f99eec1f336d946
-
SHA512
5fbbaa59d4425779ecae554372a476414a60b70fe190ca408a0505b13064866d1576e6409e657d2933cd5922a053aacdf7c01b457b3385476dabfe1c46b5c1da
-
SSDEEP
786432:BeCve2OlHAoFfgrh96BKMZvBx9ImCrWFi6:BejjlHAopI9xABx9ErWFi6
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Client.exe