Analysis
- max time kernel
110s - max time network
92s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
08/11/2024, 02:05
Behavioral task
behavioral1
Sample
111d4dc2a43b7fe894decb4264935fdee94c72f1ab9d26fdfa6ba04eceebd605N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 111d4dc2a43b7fe894decb4264935fdee94c72f1ab9d26fdfa6ba04eceebd605N.exe
- Size 83KB
- Sample241108-cjacrasgnl
- SHA256 111d4dc2a43b7fe894decb4264935fdee94c72f1ab9d26fdfa6ba04eceebd605
- MD5 3f1f206bb7176cb1f7139d600f2dfd20
- SHA1 d6a3762cc6cfd9b6107b7aff093521fb0da3a3ea
- SHA512 265815c62d8c3d91fafbaf59e9a49acfd8c20b274aee9daa9b6328ae07f9f0623fbcc938ebccd6776dabd2ae5d86dfe3275504db8659c2a79023768ffafa9482
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+SK:LJ0TAz6Mte4A+aaZx8EnCGVuS
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2204-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2204-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2204-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2204-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2204-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 111d4dc2a43b7fe894decb4264935fdee94c72f1ab9d26fdfa6ba04eceebd605N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-GVYvjwS6WsM4T34x.exe
- Size 83KB
- SHA256 641cff5bff76891164579dba623cdc9865e2ed781b10e301bb9edd7ccc1ffa81
- MD5 611a880aecfa8452c003191d2dfa7a5b
- SHA1 d070e3a9a21ad4417a353b9ad3a0adcc20d3953c
- SHA512 a420f4629d88ebed199dec784b0cddb17857f88d1b2abc1ec1f1aa58215aee87f20ee687d81712bcd69fbd8e04dc056d2f89795136f7c850b7d10ab1a1053bbc
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+LK:LJ0TAz6Mte4A+aaZx8EnCGVuL
- MD5 SHA1 SHA512 SSDEEP