Analysis
- max time kernel
111s - max time network
96s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 01:02
Behavioral task
behavioral1
Sample
dc7dd65ea24f11c24918126183aa9903d1c6e6be9b0908188d28718ee97a97e3N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target dc7dd65ea24f11c24918126183aa9903d1c6e6be9b0908188d28718ee97a97e3N.exe
- Size 83KB
- Sample241108-bd6ckatrdk
- SHA256 dc7dd65ea24f11c24918126183aa9903d1c6e6be9b0908188d28718ee97a97e3
- MD5 d63ebeeb933bce87abece100dcad4030
- SHA1 4c5b674ab43a3896da85f953893efc7b53b36341
- SHA512 76cb05fc379429da78a83648c1e88dfc49c00022ff232e31c4215fe5e9e867eb156ab8ba8c89bd1352ea038f8e3c7ffff693ca11f592987630cf3cadd2623726
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2132-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2132-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2132-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2132-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023ca6-12.dat upx behavioral2/memory/2132-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2132-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language dc7dd65ea24f11c24918126183aa9903d1c6e6be9b0908188d28718ee97a97e3N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-JoPUnp61LieoBWQA.exe
- Size 83KB
- SHA256 c7839c190686bed7c86b137af864ad255b92b9e760b42f2b73050c4436a36bfd
- MD5 60e9b4aef691541887ac7a7187c3f9c4
- SHA1 35d57baeea4a2f04be1f6be1e8cecf579717e3eb
- SHA512 61207bd17a030063e76e13f304da7b633a109146a013e7fb6881a5f3cb836b4774b9092b1d3dee53392267ebb57e8466f33001f373523f64b46427b4f89670b3
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+bK:LJ0TAz6Mte4A+aaZx8EnCGVub
- MD5 SHA1 SHA512 SSDEEP