Analysis
-
max time kernel
92s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/09/2024, 19:19
Behavioral task
behavioral1
Sample
b4361d021942b432829c95f6f4b09590N.exe
Resource
win7-20240903-en
General
-
Target
b4361d021942b432829c95f6f4b09590N.exe
-
Size
161KB
-
MD5
b4361d021942b432829c95f6f4b09590
-
SHA1
4bbbca3c13e339cb0867d1d15b62969e9adcf594
-
SHA256
ea3f1777a28b5a1a44af02004c5dea976c107577045b45c5ae321a23ccbdc7b1
-
SHA512
f7feaf6b23e2342f3c4341510fa1fddd874ef55a41b3c7dfb51c93e0810aaa4c385d3cb41c0326e7fb8f325743c60d09edb366701177c5abd50aba8d2745523f
-
SSDEEP
3072:4xTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3ZCqkz1Mt1VQIDO:62pdqfv2IPOGfXf5ovWJCN1MKI6
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4324-0-0x0000000000400000-0x0000000000429000-memory.dmp upx behavioral2/files/0x0007000000023483-5.dat upx behavioral2/memory/4324-102-0x0000000000400000-0x0000000000429000-memory.dmp upx -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\dextor32.exe b4361d021942b432829c95f6f4b09590N.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b4361d021942b432829c95f6f4b09590N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
161KB
MD5b4361d021942b432829c95f6f4b09590
SHA14bbbca3c13e339cb0867d1d15b62969e9adcf594
SHA256ea3f1777a28b5a1a44af02004c5dea976c107577045b45c5ae321a23ccbdc7b1
SHA512f7feaf6b23e2342f3c4341510fa1fddd874ef55a41b3c7dfb51c93e0810aaa4c385d3cb41c0326e7fb8f325743c60d09edb366701177c5abd50aba8d2745523f