Analysis
-
max time kernel
110s -
max time network
91s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
01/09/2024, 08:00
Behavioral task
behavioral1
Sample
ad203e0aa3b816a8c38de65e7ffbbeb0N.exe
Resource
win7-20240705-en
General
-
Target
ad203e0aa3b816a8c38de65e7ffbbeb0N.exe
-
Size
83KB
-
MD5
ad203e0aa3b816a8c38de65e7ffbbeb0
-
SHA1
7860dbcc16004e25a8352b77298365ad90e68010
-
SHA256
0563a10602f59cbe43cc4c575656d030a01c9e5463ebef54993acde100fb1378
-
SHA512
0f13d445f739ba49a8a82a7e66691e5fb712a6477169e473547b181b0c79fb1ffebce42daad88658f7fff9c4833eb13c3024dbf2f32330b088afcc6b6c98ad96
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2500-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2500-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2500-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2500-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2500-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ad203e0aa3b816a8c38de65e7ffbbeb0N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD50c307914df4c875c4ec615ce18d393a2
SHA1fdcb080234b4611ae53f159790530095768e13a7
SHA25653d697c795fa09777757e93b37e32b3af9456e21f668f21e4714769edafa21b6
SHA512f1bf451a00e6b5d8674538f0bdb2a580dcee55dc382af5723058ea3b2c551f585df3d5775d47d459d8ed480f8ddb64c284aca0e0bfb93bca036ebfe78482ef7e