Analysis
- max time kernel
111s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 16:27
Behavioral task
behavioral1
Sample
8057a1314df4bed704dde5548b3f7d3cbdccebe78dcb4f0c35ffa068374ab449N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 8057a1314df4bed704dde5548b3f7d3cbdccebe78dcb4f0c35ffa068374ab449N.exe
- Size 83KB
- Sample241107-tx4l7awarr
- SHA256 8057a1314df4bed704dde5548b3f7d3cbdccebe78dcb4f0c35ffa068374ab449
- MD5 cce0d865c4664966c8e583062a883ce0
- SHA1 1fcd956368b3ebf1225578a3a727dd57bd3aefa5
- SHA512 832808633317505c3a4fabd320f9a3aa8cf8a6f093533efd1c99e9eb9db3e0ef859bd06ca8c7756039d4abb42f10509b3685f4470aecaad92091d9e493db1a95
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+KK:LJ0TAz6Mte4A+aaZx8EnCGVuK
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1784-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1784-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1784-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1784-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1784-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cb3-12.dat upx behavioral2/memory/1784-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1784-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8057a1314df4bed704dde5548b3f7d3cbdccebe78dcb4f0c35ffa068374ab449N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-d9OhuGh9fsDbMJcl.exe
- Size 83KB
- SHA256 87cd8e9b3df73955493871a119c8c7a792452bd310d1d9900eba3301b6593db3
- MD5 a3e51993d97bf6edd8bbc92f023cc349
- SHA1 2cb0a56eab2c92054d1f3ab632c9b50604677ab8
- SHA512 3de3c1989e7a303a962fbff0da62b7917200b583eefd7aa2103623f5712de5f6cd90f82681e258f6a5b868059dffea1d48d46b091d2c742d418707f240fff2c8
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+WK:LJ0TAz6Mte4A+aaZx8EnCGVuW
- MD5 SHA1 SHA512 SSDEEP