Analysis
- max time kernel
111s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 01:06
Behavioral task
behavioral1
Sample
936e18896be3f9d2c8f3225756f8e44cee4782481882db35a4b6b00ad3b90122N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target 936e18896be3f9d2c8f3225756f8e44cee4782481882db35a4b6b00ad3b90122N.exe
- Size 83KB
- Sample241108-bgdrqa1lay
- SHA256 936e18896be3f9d2c8f3225756f8e44cee4782481882db35a4b6b00ad3b90122
- MD5 841fa505d1823a65615253c5e1e887b0
- SHA1 4b4a32f88ba459f3930f15ff52ee21ceb45dae05
- SHA512 a920a2824e625e7df33157d65e5d59ffa28412e135641e5a334681a54906d2221d84c57919e567786db61c60b2a71af8dad5740cfe0ad7298ee5efa54cf60f9a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+gK:LJ0TAz6Mte4A+aaZx8EnCGVug
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3428-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3428-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3428-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3428-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023ca6-11.dat upx behavioral2/memory/3428-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3428-19-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 936e18896be3f9d2c8f3225756f8e44cee4782481882db35a4b6b00ad3b90122N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-LlJLpmNNyycwQk6b.exe
- Size 83KB
- SHA256 1998365b2e8717a455f5613a85bcdbbd7062c949c683720d698ca48d2f81af4b
- MD5 96d0230d9a26771121f5844cbd806455
- SHA1 70dc9259e56382604929859d05e2ab4a5e79ecd6
- SHA512 b154e81c7ca1326d49aa834394d8ce95b6b54de0e4a9a1bf91ddf49de21e7e06b9d478b7c33c4f9df3a2777d6f48d0bb340af080a6b3eca492113d22de793c9c
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+FK:LJ0TAz6Mte4A+aaZx8EnCGVuF
- MD5 SHA1 SHA512 SSDEEP