Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07/11/2024, 09:43
Behavioral task
behavioral1
Sample
14885ad822033cb1593edeea47cece006a3322586514371cb9939913fa106798N.exe
Resource
win7-20240903-en
General
-
Target
14885ad822033cb1593edeea47cece006a3322586514371cb9939913fa106798N.exe
-
Size
83KB
-
MD5
1219c2b614dec84566b46b92705db690
-
SHA1
6d66a4d746ce326c67dd925abb32745c7bea2a5c
-
SHA256
14885ad822033cb1593edeea47cece006a3322586514371cb9939913fa106798
-
SHA512
42198c1dade04096e244126219f63e23c91e6d27eb183e23d387f4db03e610b0932c4cee2511414b0ad7a19a1af204f55ebf17b3f1292cbf14e1799b46596f87
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+gK:LJ0TAz6Mte4A+aaZx8EnCGVug
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2960-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2960-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2960-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-11.dat upx behavioral1/memory/2960-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2960-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 14885ad822033cb1593edeea47cece006a3322586514371cb9939913fa106798N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD573848be8a4c3646f4da9020e17464016
SHA1e8991b8e1ae8ab8adfe327df84afcaa6ce8fe224
SHA2567ba5dd2783219f99a7e9714892c098ee4bdc417b34b7678c576f1de076d1199e
SHA512b75de19b7d82861406cbfa1a358f8abbf15187a9bba11396bcbc594b901847629c20d34a9076c9a37f007afaeae354c3018c15c7b224ec496a1ecbde260224ed