6bb392b6eeba84e927fdf06cdb73f4d7e1feca5ce6916b5871f29175f7e29e34

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09/08/2024, 09:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2755c568579d22350f05e0dc5ad270c0.exe
Size 617KB
Sample240809-k4n1mssepd
SHA256 6bb392b6eeba84e927fdf06cdb73f4d7e1feca5ce6916b5871f29175f7e29e34
MD5 2755c568579d22350f05e0dc5ad270c0
SHA1 657dd9bc6ea3197addc715ea298195d313759047
SHA512 6ab7ede9f2b6e044f01810360258265f2f22c6faaa6015e24a6479c7057d3fe62b305a92269ba495a03d80e86600f94f742ead5ad840053e14f499f62b187c74
SSDEEP 12288:u+8DGfnYiXy4lshJdV1iAbfdNVfIeKR4+mDk3xafoIXeJh+VUYp6KyZUvxKOXu+9:97nYLxh3iAx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2188	2755c568579d22350f05e0dc5ad270c0.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2755c568579d22350f05e0dc5ad270c0.exe

C:\Users\Admin\AppData\Local\Temp\2755c568579d22350f05e0dc5ad270c0.exe
"C:\Users\Admin\AppData\Local\Temp\2755c568579d22350f05e0dc5ad270c0.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2188

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

d3d9.dll

Path \Users\Admin\AppData\Roaming\d3d9.dll
Size 519KB
SHA256 d2db4f9fd0f735924551880e7eda166f70c92138def88165efdf7dcc8e1aa25e
MD5 4b75900a18fe705fb30596199d656d9f
SHA1 747591abbbe47b4d109e2d607a5503c455f4cfa3
SHA512 d5783b4b489d06ad7b7d3050928adda476c1a6cc526a21c6d063f4e65e44a6e1c24910ba1cc6040dca656b39f7691fa8c51f1c6361c43f101f1ff18fe52d54cd
SSDEEP 12288:JgzS1g62VVch4QfOqwKilYFIq4ZJUVMMiZUo:a9FVOGBW4cbf
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2188-0-0x000000007417E000-0x000000007417F000-memory.dmp

Download

memory/2188-1-0x0000000000B60000-0x0000000000C00000-memory.dmp

Download

memory/2188-6-0x0000000074C00000-0x0000000074CC1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads