Analysis
- max time kernel
120s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 08:58
Behavioral task
behavioral1
Sample
f19f8529bdfa5cd592f5c973f7f9cba06f14c18a9603081226e73b42e1119979N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target f19f8529bdfa5cd592f5c973f7f9cba06f14c18a9603081226e73b42e1119979N.exe
- Size 83KB
- Sample241107-kxd7vssjer
- SHA256 f19f8529bdfa5cd592f5c973f7f9cba06f14c18a9603081226e73b42e1119979
- MD5 96019bd4dcb4775d9b64446876cb2e90
- SHA1 df7934b5100f4250de6d3598e33fdb5ccde06992
- SHA512 3a8c19c7c917adda746bba5bd776f70d63574fe10977cb669009105d598fb83cb0e07d70c0b9a2bb74ba9746d188c4dc3532ed833b76e5332e7c4f90aadd1dd3
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+7K:LJ0TAz6Mte4A+aaZx8EnCGVu7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5040-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5040-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5040-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5040-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8b-11.dat upx behavioral2/memory/5040-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5040-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f19f8529bdfa5cd592f5c973f7f9cba06f14c18a9603081226e73b42e1119979N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-rqUpxaWUPmR4KsZc.exe
- Size 83KB
- SHA256 0178443f4b66a1f3c17b78dd58dfc751194993b332945a70aef46a310f4cb576
- MD5 e597259e6fa1d38b137d73394ffa2bed
- SHA1 4fbbc96e5d604b56bfd6512552cd765f0655a73f
- SHA512 5bc0b4ac82136dfb5a58149146d178994d2bda76e526e1b5cdcf2344e472855d157431f4d1bddb0ee4f2a0fec791dbeece2028e8da0e10b733306986d2998fa1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+XK:LJ0TAz6Mte4A+aaZx8EnCGVuX
- MD5 SHA1 SHA512 SSDEEP