Analysis
- max time kernel
111s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 01:04
Behavioral task
behavioral1
Sample
d1e6edd81f97c3dc4871f3af108acc8a1dfc7b69dbf1bd297b2d648b415c9b71N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target d1e6edd81f97c3dc4871f3af108acc8a1dfc7b69dbf1bd297b2d648b415c9b71N.exe
- Size 83KB
- Sample241108-be3m3a1khv
- SHA256 d1e6edd81f97c3dc4871f3af108acc8a1dfc7b69dbf1bd297b2d648b415c9b71
- MD5 0207cf6d1b8b0fc2b3e23c297d1f1ba0
- SHA1 cb6b0360a0507da8b9ad54c3fe88b36a9d125a05
- SHA512 39705df27a2250280ada5f01492a00fa5f6edf28512db618a5be9c10b0cc75ff975afb8fae82d58675e9c71580f2bad7e89c71b8dda740d4bcfd4543eeb076e8
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K:LJ0TAz6Mte4A+aaZx8EnCGVu6
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3368-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3368-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3368-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cc6-12.dat upx behavioral2/memory/3368-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3368-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d1e6edd81f97c3dc4871f3af108acc8a1dfc7b69dbf1bd297b2d648b415c9b71N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-4kKiNLFzX69MtYTL.exe
- Size 83KB
- SHA256 b059069dc4df4894a4ea4b6076272242911f198a489626ae336dcbe7482dce8c
- MD5 269b8c87d4026a896d8a7e714fe9d973
- SHA1 bfd5b3d7a3d604f4215330ed85892e021d1c865c
- SHA512 6b6eb5974fd27fea0d4f77cbe6cf73364c16a1fe7084fcfe1e1c5af5a2e5fadc89693ae6a06ad4cdca8589aa3debc0b469a2920d8a866f5dd6159fc27fb0666f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK:LJ0TAz6Mte4A+aaZx8EnCGVuJ
- MD5 SHA1 SHA512 SSDEEP