Analysis
- max time kernel
110s - max time network
95s - platform
windows7_x64 - resource
win7-20241023-en - resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system - submitted
07/11/2024, 13:58
Behavioral task
behavioral1
Sample
e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7N.exe
Resource
win7-20241023-en
2 signatures
120 seconds
General
- Target e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7N.exe
- Size 83KB
- Sample241107-raba1stdje
- SHA256 e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7
- MD5 3d4f8bad084dc96871bd2fa5f56e6860
- SHA1 8e62cee44ca16644e54cafd164789043acccd680
- SHA512 17ff71d6d5f30cb9b029819ddb75a8f2efd6d132ea1a7e36a792e09d168227a7621c5f8ac2d0954731753cb0581d5dc234b501e6238bd096203b2d7b37d2b86f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+QK:LJ0TAz6Mte4A+aaZx8EnCGVuQ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2824-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2824-2-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2824-6-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-13.dat upx behavioral1/memory/2824-16-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2824-23-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-GTNdQxXPffIfQQ6b.exe
- Size 83KB
- SHA256 343cfcd3a0c163e6675b577310b680d912024bb76db32db3d89862e2c856309c
- MD5 f8062470ac56cbb526c805c683cfb031
- SHA1 708e06cc116a504446b1e4da529e4c6394f72bb6
- SHA512 84c68ba119a8fb13e89d92d1db6f7ad969c42f2eff9da9e8ce1580fbcb209e8853e08219d5193a2e76cf1bd19c386f3b673f5186f0a73ebf2a71f2fadf2b1c8c
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+LK:LJ0TAz6Mte4A+aaZx8EnCGVuL
- MD5 SHA1 SHA512 SSDEEP