Analysis
- max time kernel
111s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 10:54
Behavioral task
behavioral1
Sample
fbd1ca2f930d24d3fb83afc1b98d4ab1d7db3d9f6617dac99e70e087fd3a635cN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target fbd1ca2f930d24d3fb83afc1b98d4ab1d7db3d9f6617dac99e70e087fd3a635cN.exe
- Size 83KB
- Sample241107-mzsjdatldk
- SHA256 fbd1ca2f930d24d3fb83afc1b98d4ab1d7db3d9f6617dac99e70e087fd3a635c
- MD5 01d13b2e9f030164d8614a94054c5b00
- SHA1 d36aac929e5a0b55808d89a3f7f3107049588cd4
- SHA512 e12df39581badcfd66fa7de921961a6a164fd63580a6ae1081be2f3b01315b618910dcaa7307e2cac390860ea6b00895118a2965e7d1bad35dec689193ac2e66
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+pK:LJ0TAz6Mte4A+aaZx8EnCGVup
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1440-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1440-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1440-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1440-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023c9f-12.dat upx behavioral2/memory/1440-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1440-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fbd1ca2f930d24d3fb83afc1b98d4ab1d7db3d9f6617dac99e70e087fd3a635cN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-wrV63sSeaH5hAm2e.exe
- Size 83KB
- SHA256 4a5b4eb853f038b40228d8dfb1beabc2ed55fd7f1aaef890ad4179af051e7519
- MD5 8b83a97423ea8c4bd8c618a037934cc8
- SHA1 d4db2d87faddf7d4d615e303fc588701af2e804c
- SHA512 d0229c7411c8e84005f7b00edbf592d8999e97f2b5542fa7b2427899d9707211695eef49573b20ee6bd07bb3bdba945847316f51c8fa8c7eb48cdbb6716e73c5
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+UK:LJ0TAz6Mte4A+aaZx8EnCGVuU
- MD5 SHA1 SHA512 SSDEEP