Analysis
-
max time kernel
110s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/08/2024, 20:50
Behavioral task
behavioral1
Sample
04ddb96a3a7bb461837161c68337b1c0N.exe
Resource
win7-20240704-en
General
-
Target
04ddb96a3a7bb461837161c68337b1c0N.exe
-
Size
83KB
-
MD5
04ddb96a3a7bb461837161c68337b1c0
-
SHA1
b88be6f5697ced1c91834a322ac70e53a44a2f99
-
SHA256
94fb6ebbe9dcba286a9beed7ada8cf632661dc89e653f7addcb6ff88934641c3
-
SHA512
9b6fdbea2b1060f2937c3c9e9ddbd7966f9643899ecd32dfe038ef3844e317703527fd06ab55847264e98b7c8c6843cc0b04d23e14a5da919ebbf14acaf11e9d
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+FK:LJ0TAz6Mte4A+aaZx8EnCGVuF
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2300-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2300-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2300-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000400000001693c-11.dat upx behavioral2/memory/2300-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2300-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 04ddb96a3a7bb461837161c68337b1c0N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD50ad350e4343628f850e263e9bb5a1445
SHA1bd8355beebd32f66ccb3262698bbb144ce0c7dcf
SHA2562397c3e482ede61d44f249833832bfe08cb787ae5b83f3cb31f2e7df01fd746b
SHA5124211cd51fb85d8309660948c75d1286a1c893853ed1e18b39b13a055510c3dd136f89f702548cf104cf65862633a608509887b3e52290e63333d2b4e68faa159