Analysis
- max time kernel
120s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 13:54
Behavioral task
behavioral1
Sample
e013a6fa61b2f581ba75debae343a37b64b232a861f62fd94eb239811994e789N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target e013a6fa61b2f581ba75debae343a37b64b232a861f62fd94eb239811994e789N.exe
- Size 83KB
- Sample241107-q7129sspat
- SHA256 e013a6fa61b2f581ba75debae343a37b64b232a861f62fd94eb239811994e789
- MD5 cdcaf86795c9f592dcb111fab7061540
- SHA1 1794d748f784b0773fd25b714ff06ec554ba638b
- SHA512 e2ca73483d87f7423832a39629ab4ea592238c18ea24ba3fdd03c9ff65197067b220cd98c2b994491c4cc8147babb45ff8fe1c0b3555ce73b06d311597cb7a62
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+vK:LJ0TAz6Mte4A+aaZx8EnCGVuv
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3588-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3588-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3588-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3588-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023c13-12.dat upx behavioral2/memory/3588-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3588-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e013a6fa61b2f581ba75debae343a37b64b232a861f62fd94eb239811994e789N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-6H5NP4BspA89cinG.exe
- Size 83KB
- SHA256 fe21852aec1202a1d3246b2fcd68207e84d09951d762cea8e5bfa023aac4070b
- MD5 28e0815c66abd92be3e4023bc94005ca
- SHA1 95a9b8a9f11e4d8874a3d57393d2bdad35700c32
- SHA512 651da39041ce598f543b3f67c5a775f100eade2a2e4a88be0e4d95f9eca7cc127e0ef5e4b59437f80af3b3cd93e6107decf0197fd8c2ccaec588b47a4de05d6a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+OK:LJ0TAz6Mte4A+aaZx8EnCGVuO
- MD5 SHA1 SHA512 SSDEEP