Analysis
- max time kernel
111s - max time network
104s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 14:40
Behavioral task
behavioral1
Sample
4daae962fe2a33ba88dfd248a133732756f068600d717472b12939145655a1a8N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 4daae962fe2a33ba88dfd248a133732756f068600d717472b12939145655a1a8N.exe
- Size 83KB
- Sample241107-r2dkfsthjn
- SHA256 4daae962fe2a33ba88dfd248a133732756f068600d717472b12939145655a1a8
- MD5 a522cffef31497d2816f8b340ee43770
- SHA1 31522bbd8583862301ec8dbbcdcafcb3aadc5f30
- SHA512 0d6135c7763b786d7f286befc20860749a03c3f478452deccb73f2db134813218718140fd767b475bc595cd9c28e6b18ea4d2262e5a5bbf449f4f9f5d3f90126
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+9K:LJ0TAz6Mte4A+aaZx8EnCGVu9
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2464-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2464-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2464-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8d-12.dat upx behavioral2/memory/2464-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2464-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4daae962fe2a33ba88dfd248a133732756f068600d717472b12939145655a1a8N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-clGvey2ts1FGD1Ha.exe
- Size 83KB
- SHA256 115d613ec0885e83605d8acceb79a8f9287f0427a98deff9958ca4cb14f800df
- MD5 1e48ab8bee7e2ace5c8bf4fc4e307bda
- SHA1 fef3ed778ae687a93306bca86327b27a7b9ca4ed
- SHA512 6828cc456cd73a70c686a1adb200ae0917403c9588ccca6c8401a3b2c340ef2a14b8eb78db7178aeb60aa80a8ae17375d872052301547b88622c1687e0ff4db8
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+1K:LJ0TAz6Mte4A+aaZx8EnCGVu1
- MD5 SHA1 SHA512 SSDEEP