Analysis
- max time kernel
111s - max time network
99s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 13:58
Behavioral task
behavioral1
Sample
e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7N.exe
Resource
win7-20241023-en
2 signatures
120 seconds
General
- Target e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7N.exe
- Size 83KB
- Sample241107-raba1stdje
- SHA256 e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7
- MD5 3d4f8bad084dc96871bd2fa5f56e6860
- SHA1 8e62cee44ca16644e54cafd164789043acccd680
- SHA512 17ff71d6d5f30cb9b029819ddb75a8f2efd6d132ea1a7e36a792e09d168227a7621c5f8ac2d0954731753cb0581d5dc234b501e6238bd096203b2d7b37d2b86f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+QK:LJ0TAz6Mte4A+aaZx8EnCGVuQ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3580-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3580-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3580-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3580-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8d-12.dat upx behavioral2/memory/3580-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3580-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e699797b99064f9526633869cffc469b1de89a7649f0be032bdf4a2c27e48ab7N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-308jv2phBEzXBkkk.exe
- Size 83KB
- SHA256 eb94cf47f822a31dd12c80f779fbe00f2ad2a0f0a5f13f30098ff1251e27f15d
- MD5 adfad5299dffeea744ef4d13dd52c9eb
- SHA1 a146df1b1fdf628e329a89504f1985a4bae5d61d
- SHA512 a4d5f7def360b7b84e8da58bc9aa253384c016db89e81018dd46144c4665e4192d5f55dbddf1134e00ed71def8f58fd1767f61423d85dccec8914d18e03384d1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+RK:LJ0TAz6Mte4A+aaZx8EnCGVuR
- MD5 SHA1 SHA512 SSDEEP