14f5d212bb65cb0d4163625bdb6bbe55b74856130c5d3c6ea341e8b713d5b03a

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/09/2024, 10:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

89ba74cae3e0360c5226f0855a3a7400N.exe
Size

163KB
MD5

89ba74cae3e0360c5226f0855a3a7400
SHA1

724bd1caf6cfd3bb0450cda77fdddb49c07f0d4c
SHA256

14f5d212bb65cb0d4163625bdb6bbe55b74856130c5d3c6ea341e8b713d5b03a
SHA512

742fc611677ae6da49594ac8488a50d65665f8f40555a7d1c8a9c13beb9049ee14f9cae99c2ab08b85919b456942aa2ced125f2bfb144555559b48400f2835fd
SSDEEP

3072:enay2oRlRjwnwQHSXIBlf08qySzCetFtJSuSSSskCTa+aiUwD:wHXRlRBtJNTaHi/

Score

7^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/556-0-0x0000000000400000-0x000000000040B000-memory.dmp	upx
behavioral2/memory/556-1-0x0000000000400000-0x000000000040B000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	89ba74cae3e0360c5226f0855a3a7400N.exe

C:\Users\Admin\AppData\Local\Temp\89ba74cae3e0360c5226f0855a3a7400N.exe
"C:\Users\Admin\AppData\Local\Temp\89ba74cae3e0360c5226f0855a3a7400N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:556

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/556-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/556-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download