Analysis
- max time kernel
110s - max time network
100s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 00:52
Behavioral task
behavioral1
Sample
778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN.exe
- Size 83KB
- Sample241108-a8chastqck
- SHA256 778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89a
- MD5 759864f0e1a6851c9bc24cc7730bd200
- SHA1 6690a1e05bd4d63809ee838856acd161d2f9ecf2
- SHA512 9e258141cd7525a6aaf9305fff4e4322081f5bcc852d124f57abfaed00dca4d572cbc950a6c9831330ea28c07d2d8fd7ac49de14e961513bf0b925a6f4f67b96
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+dK:LJ0TAz6Mte4A+aaZx8EnCGVud
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4228-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4228-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4228-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c98-11.dat upx behavioral2/memory/4228-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4228-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-pXyqRPllQa9tFgXY.exe
- Size 83KB
- SHA256 e6ac75020ac2232367e6a1f191e70936795ba152543a43875eeb0fc778e5e87a
- MD5 d947937bedb98aa9b7b8624e64016911
- SHA1 21b523a124ef0d81a856b1e0c85a95a184f7d189
- SHA512 2f16470e48669c8bcb3c5e361b49ebab10b02e5bf5aeb1699aa71bd6ad16069842dff16c23979142e30b9a882ab988a6d697b9f735470032af7965b1061fe493
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK:LJ0TAz6Mte4A+aaZx8EnCGVuy
- MD5 SHA1 SHA512 SSDEEP