10a7cbb934a6d327eb897dc971d03494e50176c9ac05e95d56090d8deeff48f2

Analysis

max time kernel
93s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-09-2024 18:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

10a7cbb934a6d327eb897dc971d03494e50176c9ac05e95d56090d8deeff48f2.exe
Size

171KB
MD5

163ebe9a1e67bcc4940cefe02fef9587
SHA1

0a89caa616c5fba8190f577448f2d26207166379
SHA256

10a7cbb934a6d327eb897dc971d03494e50176c9ac05e95d56090d8deeff48f2
SHA512

dc21506bd3577f7b1e82e4d3998a576a8a9a7a06a62a04af38bfd3f70671bb29546a8ab633ab9ec135850dd606d38f6f7e6ec05b1e081203ee5abf384b3de1e8
SSDEEP

1536:V7Zf/FAxTWoJJ7TTQoQt4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+F:fny1oRgWHIjN3tj6qnv0b2UrXkbvLm

Score

7^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2436-0-0x0000000000400000-0x000000000040B000-memory.dmp	upx
behavioral2/memory/2436-1-0x0000000000400000-0x000000000040B000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	10a7cbb934a6d327eb897dc971d03494e50176c9ac05e95d56090d8deeff48f2.exe

C:\Users\Admin\AppData\Local\Temp\10a7cbb934a6d327eb897dc971d03494e50176c9ac05e95d56090d8deeff48f2.exe
"C:\Users\Admin\AppData\Local\Temp\10a7cbb934a6d327eb897dc971d03494e50176c9ac05e95d56090d8deeff48f2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2436-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2436-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download