Analysis
-
max time kernel
111s -
max time network
97s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
12/10/2024, 21:38
Behavioral task
behavioral1
Sample
e6b54aa0f6aa5705873c67ae72a007b2c189072a14bfa8f61b4a2fd5168b7f0fN.exe
Resource
win7-20241010-en
General
-
Target
e6b54aa0f6aa5705873c67ae72a007b2c189072a14bfa8f61b4a2fd5168b7f0fN.exe
-
Size
83KB
-
MD5
3a444a24b51acdd05fb17653b0a051a0
-
SHA1
dfba9792a81295a8c74ec5df294f00ba31103773
-
SHA256
e6b54aa0f6aa5705873c67ae72a007b2c189072a14bfa8f61b4a2fd5168b7f0f
-
SHA512
1f200763cbd1952729b596fed38f425269804f4d7cf6ff020149cdfb7ee93be015fada02c5b3ba38c34ee97bc2dbb583eca569cad3b349278c8180975ab52664
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK:LJ0TAz6Mte4A+aaZx8EnCGVuP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2864-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2864-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2864-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0013000000016d3f-11.dat upx behavioral1/memory/2864-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2864-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e6b54aa0f6aa5705873c67ae72a007b2c189072a14bfa8f61b4a2fd5168b7f0fN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD543f8dadd63f5746fb3b7370a15d2a616
SHA1bb5938738824b6b462dcc1b16e909791b6c31b29
SHA2566271d2f30fbef31056db42d4fdff652ce43d36a22fb48b81583139f62a398dc5
SHA512dfbacc1089241ba0ba55238c3555ff326aac24943287a3c28439a5640d538fdb2d14b90ff1cf428f520604c2e061038ce780d91fbb7e1059c55d9a967da98f9a