Analysis
- max time kernel
16s - max time network
16s - platform
windows7_x64 - resource
win7-20240729-en - resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system - submitted
09/08/2024, 09:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NеwInstV2.exe
Resource
win7-20240729-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NеwInstV2.exe
Resource
win10v2004-20240802-en
10 signatures
150 seconds
General
- Target NеwInstV2.exe
- Size 566KB
- Sample240809-k4pbeasepe
- SHA256 6efcbe547643668608b024d23946f1fd27fe85b10dcd2a002119fdf8573eea8d
- MD5 5d6bd6f81d0e95cfa7a90d1e012065f0
- SHA1 9718066f275e40292a5e6b69b27249467339dac1
- SHA512 1a68dc3c76b3971d178bf0e0f69eaff47ecbe9714aeac1607534211ec15b5a25a7ee926af1e7aaf3f1fe86f58663e99ad8223cca6e4ff7039ffacbade38394c6
- SSDEEP 12288:B2/7JiPDhKlckV8wAy0BrE9pCF0FSA3Kwv4A7Jf9BMWF6oAAoKi1HJWw0UvWTc2o:W7qDhKnoNOc
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 1368 NеwInstV2.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language NеwInstV2.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path \Users\Admin\AppData\Roaming\d3d9x.dll
- Size 511KB
- SHA256 c4cdcae48d79dc0e8b2b4613786722dada2b8b4fab32a60e311f0396afd4d03f
- MD5 9f84fd5b68763352b5492b6fac72ab84
- SHA1 0bb1f347f8bf6f782fae6e335c77d9dd00815c6e
- SHA512 2c8444e56bc1542af248e6cb4d3403730bddab67b3a576f9016a988ca54618e67a56226750cf9988be1fe84fb2a97eeefb3abbbe11b8fc6036599dd816f923f0
- SSDEEP 6144:higSQYZtEn/saEYlwC91qNwXB/K4VWMaEZNqaWcvH0V2xOV0JNyOL4:DSQRsaiNsBHbataRvUIxOky
- MD5 SHA1 SHA512 SSDEEP