Analysis
-
max time kernel
110s -
max time network
91s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 10:39
Behavioral task
behavioral1
Sample
41affc393c29e39eb69349d45411a210N.exe
Resource
win7-20240708-en
General
-
Target
41affc393c29e39eb69349d45411a210N.exe
-
Size
83KB
-
MD5
41affc393c29e39eb69349d45411a210
-
SHA1
65de584cc5769b10197783db15d0db046c7e7aad
-
SHA256
d999423434549f7f84d5650c268e7ea365c104b29d5b588add5d990858cc28c2
-
SHA512
f16fa5dd7603ce7c4ff0e27f555697c18d44ec56e562d84742ab48e4cbb50df3b946f10b0a524eb7fa8202d6e3a5cb0e25f47149c31c0ffe8b57d6bd2d4746aa
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+dK:LJ0TAz6Mte4A+aaZx8EnCGVud
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2652-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2652-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2652-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-11.dat upx behavioral1/memory/2652-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2652-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 41affc393c29e39eb69349d45411a210N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD54d6c4c0004e74c1a381333ee0f8d2e6b
SHA1a12a2f998efd3cded6cb9115c3bfce4809802d95
SHA25621e609855230526e1f0496332b4220d20989f78711494409f87dfe8558805364
SHA512ca0431ec0da3bf6390e55f2e68dcdcefcc3ae04feb3d438f92f10be824937d639d03490f62f3a50e6b6d3335f444c00ca4d1967d9f456aa925312e6e7cc4e9a1