Analysis
- max time kernel
110s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 11:07
Behavioral task
behavioral1
Sample
83c8a15f05015cb4e9e541a7ca2a21ae440a201ca0e04bfd95b71f5d1df1ea66N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target 83c8a15f05015cb4e9e541a7ca2a21ae440a201ca0e04bfd95b71f5d1df1ea66N.exe
- Size 83KB
- Sample241107-m794dstmdk
- SHA256 83c8a15f05015cb4e9e541a7ca2a21ae440a201ca0e04bfd95b71f5d1df1ea66
- MD5 7139591f1c6ee5dd610da2f623205190
- SHA1 9f19ac361f13a99f391096d1fc02e932fc2613d5
- SHA512 80b414c36bb25103b58e6b007dfd9cb0f9692266883c100fc5decfe0d98b1cbd1fe1579354281ccd4c049ccd0fbed5d7553b41f8527910a270e090059e3e3c79
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+aK:LJ0TAz6Mte4A+aaZx8EnCGVua
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2264-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2264-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2264-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2264-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cb3-12.dat upx behavioral2/memory/2264-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2264-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 83c8a15f05015cb4e9e541a7ca2a21ae440a201ca0e04bfd95b71f5d1df1ea66N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-K1g6e88xLrd1SZBA.exe
- Size 83KB
- SHA256 78f1f87b30441b2d69d4b7b5799ae49f806936040c4065bdeeadbb63a4d908b5
- MD5 d25e7112d56f6d2d2c786d264ef33316
- SHA1 6a9f350ac8aac7d133f5915733130c23dbc2a1bd
- SHA512 7333f4b69fd554a72d44eba5c9599e4f49b5299f4849a7cec35b39406df7adf2ad42bf70aec0e6163f36a066014a71df07fc1fcd76771e8d7071065a0116ad54
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+wK:LJ0TAz6Mte4A+aaZx8EnCGVuw
- MD5 SHA1 SHA512 SSDEEP