Analysis
-
max time kernel
111s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2024, 03:21
Behavioral task
behavioral1
Sample
5f6157774dd5774dd1f95f05fe3f3e4a8d0d2a7d9509f77759d76bb094f4c41aN.exe
Resource
win7-20240903-en
General
-
Target
5f6157774dd5774dd1f95f05fe3f3e4a8d0d2a7d9509f77759d76bb094f4c41aN.exe
-
Size
83KB
-
MD5
9e10e8a429891f6fd2ef7ad4c3d8e960
-
SHA1
cf32e6d682446dc23c032b99af8b7d36b4f412b5
-
SHA256
5f6157774dd5774dd1f95f05fe3f3e4a8d0d2a7d9509f77759d76bb094f4c41a
-
SHA512
c6c44e6ac52095e4ee41df525e681c7b804b58c263e0c57776703feeb33514453226e6033a9d0d5222c02bd0f4263ecece20edc0a7e3100db3fd811bf5bab6fb
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+wK:LJ0TAz6Mte4A+aaZx8EnCGVuw
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2008-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2008-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2008-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2008-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023465-12.dat upx behavioral2/memory/2008-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2008-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5f6157774dd5774dd1f95f05fe3f3e4a8d0d2a7d9509f77759d76bb094f4c41aN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5ed2d2a4f1a0c1f1e79cda1f51d0be60e
SHA124449d771f8a19b6591ef6bcf0164a73b2e2dc42
SHA2560ee0f4b03c25799ece142191c032c0ff36520e0cbbd8a8ef1f5288fbb4cea836
SHA5128f2e782cc345dfce1144ddeb2e2ba12f6906134d32deef55672453676040311fac6cac6414655ae5dccd870268e4265814337f4a3132b016d028a061dd2921c0