Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 20:14
Behavioral task
behavioral1
Sample
3c193ed44c7985fed741e09ff7abec2f9168faf53b4d1688dd97bc56db071b87.exe
Resource
win7-20240704-en
General
-
Target
3c193ed44c7985fed741e09ff7abec2f9168faf53b4d1688dd97bc56db071b87.exe
-
Size
83KB
-
MD5
c1be6b93bf00a16ffb2f2946fa44ffb9
-
SHA1
98be5fd75114ac6b420afc5636f512f03582973c
-
SHA256
3c193ed44c7985fed741e09ff7abec2f9168faf53b4d1688dd97bc56db071b87
-
SHA512
d5e7b2008bf239a9ca0306d08de1c7ba86260bebf54dea234ff3e4e6c3eaf8cc3920648bafed7708b223cd7c893a292635b8acd98316e4399e1c5853cfc93d19
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+NK:LJ0TAz6Mte4A+aaZx8EnCGVuN
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4272-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4272-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4272-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4272-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4272-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c9d-12.dat upx behavioral2/memory/4272-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4272-22-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4272-29-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3c193ed44c7985fed741e09ff7abec2f9168faf53b4d1688dd97bc56db071b87.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD57373d9bd0008012487d687371a3fdf34
SHA17b850eef6a29fc0a05a6b4d2e79ca0018ae9ae76
SHA256ae382a382a83d446349a6a9ba2c95006c71fc4ff1b1b5562334043d8abcc15d2
SHA51239a278df489006e4f5b4154a489c9ca8351c724008e0e46869c2803637a46a09887163f1458290f508dd22148bcfc0adcf1674ed432af03623fc17636271475a