Analysis
- max time kernel
110s - max time network
96s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 01:27
Behavioral task
behavioral1
Sample
be2726ee2e85a17fcf35d5957a16e79e9a7154d9aa3f0398f3b7faff61698803N.exe
Resource
win7-20241023-en
2 signatures
120 seconds
General
- Target be2726ee2e85a17fcf35d5957a16e79e9a7154d9aa3f0398f3b7faff61698803N.exe
- Size 83KB
- Sample241108-bvabfsscjj
- SHA256 be2726ee2e85a17fcf35d5957a16e79e9a7154d9aa3f0398f3b7faff61698803
- MD5 6b041fea3056e9af2065ea070d7d2150
- SHA1 9c98f8bdca877e3cf76ee9ef56dc206e0debf95b
- SHA512 ecb412321b5cacdfd25a915c2e9d3dd6edd9eea70ef96c0530d80b1f91d619c17ecc405b82ee7f671646ce72440c6cee0d1952a8002599869df71efe5dc704c7
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2164-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2164-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2164-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2164-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000a000000023bc3-11.dat upx behavioral2/memory/2164-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2164-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language be2726ee2e85a17fcf35d5957a16e79e9a7154d9aa3f0398f3b7faff61698803N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-UA3N3ycsbzkrWZoH.exe
- Size 83KB
- SHA256 6243ee8d8ddaa447303d5b1ecee35227dd9b3a39983825fe8067f154d9b37d21
- MD5 4ba0169f3c94a6769d052415c9016f5b
- SHA1 7aa969a851199b34c364c8c073c028289baf4dbd
- SHA512 252058ce6975af762a33f7c31b27871243849109028896ab802ede27f7863aa77e9b69b48c2ed3f8fa941a4e955c947244071906821c7013c07790e2bf7399ca
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+
- MD5 SHA1 SHA512 SSDEEP