Analysis
-
max time kernel
111s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2024, 09:51
Behavioral task
behavioral1
Sample
10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109fN.exe
Resource
win7-20241010-en
General
-
Target
10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109fN.exe
-
Size
83KB
-
MD5
57577818e8361786e88f340b4d132950
-
SHA1
076025385fa01f78cf20430b89264118a95d9ffb
-
SHA256
10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109f
-
SHA512
7cd8e198c382a840dcc47117b02917a11a95c7fb4eaa281ab29dad521ba1d35eed06be47ea0aade91d72028d09ed974187e5eb0b5a677a0be800b52eba9f059c
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+2K:LJ0TAz6Mte4A+aaZx8EnCGVu2
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4268-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4268-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4268-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4268-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023c05-12.dat upx behavioral2/memory/4268-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4268-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 10f1eb65841e69eea221ebb324d4c76c1e56500d3ea6a29af5733620036b109fN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5fc64d28e2a8ffb128039c2f4bcc4556c
SHA17a037b745dd690c73f13ccb00a4f4db92e5c15bb
SHA256711be6288114156f4b2809abed691a11a6b66b852428a8903668509b2ed1b76e
SHA5122b8a35d648f6f7ab078d79e3b16f984a910dbbbf4cfb12e4618b18f636221c6037ff2977cd58e347ee0e0cd73bf260669b7e04bdab4d686c61c3b26e1908d883