Analysis
- max time kernel
120s - max time network
97s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
05/10/2024, 16:29
Behavioral task
behavioral1
Sample
6785cd39582dbaa8ed3edde1d4188c7629785d79765a2d723eb0b1610a7ff693N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 6785cd39582dbaa8ed3edde1d4188c7629785d79765a2d723eb0b1610a7ff693N.exe
- Size 83KB
- Sample241005-tzpaaa1gkf
- SHA256 6785cd39582dbaa8ed3edde1d4188c7629785d79765a2d723eb0b1610a7ff693
- MD5 e2a4348b207eaa43fa97feed3c479930
- SHA1 4934c66802287fbe5ef367e5c1ec5b05bf8fdc58
- SHA512 6dd5653709a285f203f9d44da19ae559b9d3b7132603179f87eb5dc10f8c8232131b57d80819c7722debe3db452d517415dcd0ee3cfcde5fff4566ebc9e99a85
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K:LJ0TAz6Mte4A+aaZx8EnCGVu6
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4740-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4740-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4740-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4740-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4740-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000800000002340d-12.dat upx behavioral2/memory/4740-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4740-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6785cd39582dbaa8ed3edde1d4188c7629785d79765a2d723eb0b1610a7ff693N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-UUa99piZZXWIeCNN.exe
- Size 83KB
- SHA256 a7f337aea432ca4cbfe25269c20c5e4cc6df5b9cfd322dbc72a766420808eff5
- MD5 efb2f4f63815ab84c529556c6aace0df
- SHA1 0fc77394b3b0dad7da06269ba6c8045721adac35
- SHA512 fe2cf77c3d94cddac15d86a2fbc65c372a7e6b3835e8b8632f88c1e26530a5ac81ec0c6d126f8d90588a4406f32cce409fed0408121968ab111f93a06e6194c2
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+IK:LJ0TAz6Mte4A+aaZx8EnCGVuI
- MD5 SHA1 SHA512 SSDEEP