Analysis
-
max time kernel
112s -
max time network
91s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
13/08/2024, 23:27
Behavioral task
behavioral1
Sample
afb0e9ad3964ea17166a37c195dc73f0N.exe
Resource
win7-20240729-en
General
-
Target
afb0e9ad3964ea17166a37c195dc73f0N.exe
-
Size
83KB
-
MD5
afb0e9ad3964ea17166a37c195dc73f0
-
SHA1
85934add3bcbb27cb7a27663ee903ef254b88d6e
-
SHA256
8dcefff719cad8d74e9552dce7dfe95cd98b308e280444d2aa1cbdf5930ef1d0
-
SHA512
2b507fe69c77a3058edbbf760b1fb0c71f0a925e8d4fdea30f40982c816c8a7983eaac30b6883f476340db7b2a87d2e792b3eb87ca47b65434f0da0a9fb11863
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+uK:LJ0TAz6Mte4A+aaZx8EnCGVuu
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1184-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1184-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1184-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x00090000000120fc-11.dat upx behavioral1/memory/1184-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1184-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language afb0e9ad3964ea17166a37c195dc73f0N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5adfc8d88c7ea91d33705c6cebeca8f25
SHA1b806fb5c678e9b3ead69766f2adefdcbe82d95f8
SHA256bfee6151377e2677c8f212dcf0888ac0384663e90bc257c9b475d66fcb65ae48
SHA512c13e5c819b4ccf11bb5b2892aa7698ff18f4b56f676ce838ebd13e590200f3dad0bc9b79645a70b80d7483327aee110c072659b24f29ab22f240eb6cd389d950