Analysis
- max time kernel
110s - max time network
93s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 14:10
Behavioral task
behavioral1
Sample
5468682dfbddf0f05afe835eb2e98956ecf2f78d6279a41f20431f2050311b51N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 5468682dfbddf0f05afe835eb2e98956ecf2f78d6279a41f20431f2050311b51N.exe
- Size 83KB
- Sample241107-rgr74stekc
- SHA256 5468682dfbddf0f05afe835eb2e98956ecf2f78d6279a41f20431f2050311b51
- MD5 7559eef79e12f6ff4a593e091a5c9560
- SHA1 ddc8a90a6d103cd5053122c9d82dc8a1a24c29ac
- SHA512 1f1af8af3cb6fde5f4e34dfdd9d3ac804afc8cc9a311c36679566c24f5afe8a57d6ecb2f68dd86a149431c5e08d29c110517bdc78d110d8f92430b114b52994a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK:LJ0TAz6Mte4A+aaZx8EnCGVut
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2312-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2312-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2312-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2312-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cae-11.dat upx behavioral2/memory/2312-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2312-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5468682dfbddf0f05afe835eb2e98956ecf2f78d6279a41f20431f2050311b51N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-DYY2pc7c4HrXOQh3.exe
- Size 83KB
- SHA256 21c7cd41bd4ff5f2fb632966365d7659d751d04f5836e5fcfdac1ba5e2cf462c
- MD5 478a8b1df02f1777d84f5f904e1c6d00
- SHA1 31554eb90ff33ce6585580d981c1bde4f21c7d53
- SHA512 2930d759df0f6f48ec941b3d88a0bab5667756a600e545ad0f970a0bb086fe51069a9bfc5513db2c87a83b361dbcd5da49f8ce6412115d1f79bf7048b3f9a6e1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+WK:LJ0TAz6Mte4A+aaZx8EnCGVuW
- MD5 SHA1 SHA512 SSDEEP