Analysis
- max time kernel
110s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 01:18
Behavioral task
behavioral1
Sample
671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1N.exe
- Size 83KB
- Sample241108-bpcjmasble
- SHA256 671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1
- MD5 3cda69e36c1b3647c65c547414e81560
- SHA1 636dce620f120c807ac7a895ca4f808d22b1aec9
- SHA512 f4081829ed00ecd801df89a9aa8c51299574625d222b6dabb3ed13cc5f6899103e0be4e5b39820ecd66415cc757c262f666db90ab183df16043e7876aadf93b2
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+OK:LJ0TAz6Mte4A+aaZx8EnCGVuO
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2040-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2040-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2040-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2040-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8d-12.dat upx behavioral2/memory/2040-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2040-19-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 671109ac62871aefb44237172a429e40866260b8937e3059fdf78c7744da16b1N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-BQBTGUiGjAMER2ss.exe
- Size 83KB
- SHA256 c19bf0be7d22a878095f834951d457fea90d834da3b60499f370799b942f5d58
- MD5 28223a273519cf36310f2875be0af4bc
- SHA1 6c5a5f5ca418b1ff0cf024a91331efd3a9a28c88
- SHA512 347fde8846c8cda4cd47ca3413b3c082d920d6e39ef87a9c52cc12c2b2c4272dfba6f1646d7441d6a61cce9d5df482b8661f10944c9bd8181a676a6084d4ede1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+LK:LJ0TAz6Mte4A+aaZx8EnCGVuL
- MD5 SHA1 SHA512 SSDEEP