Analysis
-
max time kernel
110s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2024, 15:52
Behavioral task
behavioral1
Sample
578adcf20ee5125e82a4944a220739e5830914e077a44d67fc69133023703b1eN.exe
Resource
win7-20241010-en
General
-
Target
578adcf20ee5125e82a4944a220739e5830914e077a44d67fc69133023703b1eN.exe
-
Size
83KB
-
MD5
a36bde69a8bcf622d9942fd4e12b02b0
-
SHA1
856350e454e35662e7324d26ad0c4a3ebbf70e79
-
SHA256
578adcf20ee5125e82a4944a220739e5830914e077a44d67fc69133023703b1e
-
SHA512
a873c47afe517b37c5827097c23ffed343ee26373e40c370821b277753141acb5e61e0bebf4d8d5d56afb1e05019e6b3429efadf52e80465c21da4043b163c50
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+hK:LJ0TAz6Mte4A+aaZx8EnCGVuh
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4944-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4944-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4944-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023ca3-11.dat upx behavioral2/memory/4944-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4944-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 578adcf20ee5125e82a4944a220739e5830914e077a44d67fc69133023703b1eN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD54fb82258356864bef180ff5c5e092ed4
SHA14a2050835b445905f435aa1eb2bd89649499543b
SHA25626b54cfcfba62471e8f6d790d0b565785147692ab4ff67c6b4698763bdd61cfe
SHA5121798bba3c76d5fab1b478f08eeba1ff2cd076a3cfe8f261ccc587d5ebd5e01625fa8fa4ac448c64f551fe1ee100ef479303fb61c2a027d6409013a23de07e9a9