Analysis
- max time kernel
119s - max time network
121s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
07/11/2024, 15:05
Behavioral task
behavioral1
Sample
1ca25b111b7d12f9c86294c80f55cf063ec3cd59a0a1f9c4b67d736bdf92c58aN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 1ca25b111b7d12f9c86294c80f55cf063ec3cd59a0a1f9c4b67d736bdf92c58aN.exe
- Size 83KB
- Sample241107-sgbe2avbmg
- SHA256 1ca25b111b7d12f9c86294c80f55cf063ec3cd59a0a1f9c4b67d736bdf92c58a
- MD5 358c8a138c45718312a3eab11c1196b0
- SHA1 ada5f361d7a6373f21961683e05679f2bce24f11
- SHA512 0de42768001e2627b60d7f3ecb0496db99db9c07216991cea5aca12e25d9cd2779a10a437824320bba0595c5d927c284f2c542fbbe3b13e56f361918cadd70a2
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+/K:LJ0TAz6Mte4A+aaZx8EnCGVu/
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2684-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2684-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2684-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2684-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2684-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1ca25b111b7d12f9c86294c80f55cf063ec3cd59a0a1f9c4b67d736bdf92c58aN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-tDyq8zihCZvYXsVJ.exe
- Size 83KB
- SHA256 f10c3d7dc3fb10d7200d897f106490788ff259fd60ee7a2beb2c888e2f9c35e2
- MD5 5bdc8d979a383619579376dbb8240eff
- SHA1 7e9f9e68534a73a413e95b154acf1fa33e655b16
- SHA512 3ace5670a24668fcaa7b23a02409d78366fa9a34840c94e9d4a523c8cda5dffc969c35cbfc1bfc456f7909290adfc57bbea2ac9e416cf7cdb0efeff22921228e
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD
- MD5 SHA1 SHA512 SSDEEP