Analysis
- max time kernel
3s - max time network
9s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
15/10/2024, 14:36
Behavioral task
behavioral1
Sample
Release/Discord rat.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release/Discord rat.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
builder.exe
Resource
win7-20241010-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
builder.exe
Resource
win10v2004-20241007-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
dnlib.dll
Resource
win7-20240903-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
dnlib.dll
Resource
win10v2004-20241007-en
0 signatures
150 seconds
General
- Target builder.exe
- Size 10KB
- Sample241015-ryzzaatfnj
- SHA256 ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa
- MD5 4f04f0e1ff050abf6f1696be1e8bb039
- SHA1 bebf3088fff4595bfb53aea6af11741946bbd9ce
- SHA512 94713824b81de323e368fde18679ef8b8f2883378bffd2b7bd2b4e4bd5d48b35c6e71c9f8e9b058ba497db1bd0781807e5b7cecfd540dad611da0986c72b9f12
- SSDEEP 96:IJXYAuB2glBLgyOk3LxdjP2rm549JSTuwUYXzP+B1izXTa/HFpff3LG+tzNt:IJXDk7LI4uwtDPC1ijCHffSs
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language builder.exe