Analysis
-
max time kernel
110s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2024, 04:18
Behavioral task
behavioral1
Sample
2e7ea5d8cf99fa66dba6829f243b405be63bf04b09486bf15adc9b9017f0bb84N.exe
Resource
win7-20240903-en
General
-
Target
2e7ea5d8cf99fa66dba6829f243b405be63bf04b09486bf15adc9b9017f0bb84N.exe
-
Size
83KB
-
MD5
183b09122d23abc3bd4a078f5e349880
-
SHA1
7143dc92a8e537bb6ec5dfb4b7cf2566ac13056a
-
SHA256
2e7ea5d8cf99fa66dba6829f243b405be63bf04b09486bf15adc9b9017f0bb84
-
SHA512
5a2b6faba3b3f9cc67f1efd89606ca1f4b2a3950896d83a524cc3c1e02d7ca852e3c472d15802663c4661732ec6b0446f97d6cf8a6c3260f0979bb1912097914
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+XK:LJ0TAz6Mte4A+aaZx8EnCGVuX
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2032-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2032-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2032-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2032-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2032-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023470-12.dat upx behavioral2/memory/2032-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2032-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2e7ea5d8cf99fa66dba6829f243b405be63bf04b09486bf15adc9b9017f0bb84N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5cbd4f5ef373feb091c2a87e71fa3d3ff
SHA1c4241d00041d2b607ee299700176c65cc603d30c
SHA256ea581fcd5592e9e65b66fbeb16bd8d1dc41d6219abf77b7d8a51750f2df305da
SHA512b0dc93a897832b9f0b1d0927bd58236f77eb39f22723be6597cf7be44ab134698df90eee303453ecefbf9ba88df397bfd95524409f191a1821679adddcab2490