Analysis
-
max time kernel
111s -
max time network
96s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
07/11/2024, 09:51
Behavioral task
behavioral1
Sample
10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109fN.exe
Resource
win7-20241010-en
General
-
Target
10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109fN.exe
-
Size
83KB
-
MD5
57577818e8361786e88f340b4d132950
-
SHA1
076025385fa01f78cf20430b89264118a95d9ffb
-
SHA256
10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109f
-
SHA512
7cd8e198c382a840dcc47117b02917a11a95c7fb4eaa281ab29dad521ba1d35eed06be47ea0aade91d72028d09ed974187e5eb0b5a677a0be800b52eba9f059c
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+2K:LJ0TAz6Mte4A+aaZx8EnCGVu2
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2856-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2856-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2856-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x000e000000012263-11.dat upx behavioral1/memory/2856-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2856-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109fN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5efc52731d1472c3b594f737300efd6b7
SHA11a88af92182fbf61e8ba2dd396c02290f17ec150
SHA256e5832b3425c79dbedd3e0bbcc8077824cc1565379d3d9b1f4abf4e1d6abe62cb
SHA512cb0996f899758d953b05326bebac2cbd59ea1a5e3ba4e3e1c2949c3edb9f27ca39b8a25dc99658605f9fc76e34301bc4f23af205e2f66ffe8fbd928b962a6645