Analysis
-
max time kernel
110s -
max time network
103s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07/11/2024, 10:15
Behavioral task
behavioral1
Sample
f9512a723c89922d0469eb37bb85cb3b6bfa31fc04c9525666200a5825796b75N.exe
Resource
win7-20240903-en
General
-
Target
f9512a723c89922d0469eb37bb85cb3b6bfa31fc04c9525666200a5825796b75N.exe
-
Size
83KB
-
MD5
fdecef608d545ffcddb59ec090638220
-
SHA1
f3f16fc9137337c0e4f472f996c79650b8d6286a
-
SHA256
f9512a723c89922d0469eb37bb85cb3b6bfa31fc04c9525666200a5825796b75
-
SHA512
1bad6e1e7922b0042f175854c38decba41ee544b974a991813b68f6f4688f8690114cc59fd9ed0e1278bc174f6c071003261ad2d084aed55552a142c3b88d23f
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+GK:LJ0TAz6Mte4A+aaZx8EnCGVuG
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1480-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1480-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1480-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1480-6-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-13.dat upx behavioral1/memory/1480-16-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1480-23-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f9512a723c89922d0469eb37bb85cb3b6bfa31fc04c9525666200a5825796b75N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD598e4a52e7e5493029153500ba23817b2
SHA16d76131089de5936527df9c67d8ffa8c127ddcd5
SHA256cb241eadd26a414c65a305c0f88c2cbf7779f7427b49175660f39179dee902b0
SHA512c27bc0cb4efccc9658a3956c8f120b4b2b355690e40fcd1e746c978b6b07d3c2980270701e3082a6f80f3243dbe855b165dcbc1886c0ca63e3e97712641b1318