Analysis
- max time kernel
110s - max time network
93s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
08/11/2024, 01:18
Behavioral task
behavioral1
Sample
671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1N.exe
- Size 83KB
- Sample241108-bpcjmasble
- SHA256 671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1
- MD5 3cda69e36c1b3647c65c547414e81560
- SHA1 636dce620f120c807ac7a895ca4f808d22b1aec9
- SHA512 f4081829ed00ecd801df89a9aa8c51299574625d222b6dabb3ed13cc5f6899103e0be4e5b39820ecd66415cc757c262f666db90ab183df16043e7876aadf93b2
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+OK:LJ0TAz6Mte4A+aaZx8EnCGVuO
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2336-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2336-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2336-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2336-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2336-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-qleDwllC0RfQgzpv.exe
- Size 83KB
- SHA256 391b24b2ce614d027a78432e0d33afc28097c4115627675f144db01e9c50a4a1
- MD5 ec026e6dc60db7e11465e47c35bd5bcc
- SHA1 f76c0ead5b7a4f22d95f0d67bb29aca985e3d4f3
- SHA512 0f28b1126c7496f463cb80bb2c7a7b9f969e9da49a91a306127f507c0dcb17a8fdcce994133f777cb1b09ff9e805bfe6a2897fea2c8dbbe70600aa236f11c128
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+aK:LJ0TAz6Mte4A+aaZx8EnCGVua
- MD5 SHA1 SHA512 SSDEEP