Analysis
- max time kernel
111s - max time network
102s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 02:08
Behavioral task
behavioral1
Sample
568e476042aa6cd19b16487cd31c637cebfa4c4f91c4bc2c5fddf511c0bba177N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 568e476042aa6cd19b16487cd31c637cebfa4c4f91c4bc2c5fddf511c0bba177N.exe
- Size 83KB
- Sample241108-ckmdpssgrn
- SHA256 568e476042aa6cd19b16487cd31c637cebfa4c4f91c4bc2c5fddf511c0bba177
- MD5 de9c0477145d0b880dcf029b1906ff90
- SHA1 3f9989108b8e4dc0f399bd0bc03a3a7afb2187f4
- SHA512 631a2e6a9a6260bd45035d3382925186b52dcc91d4c3b1fc74a64888a59578f57ae57bc5c19c389b76138383448863bfa70e94f4c677fe60bb0226108b438933
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+FK:LJ0TAz6Mte4A+aaZx8EnCGVuF
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3168-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3168-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3168-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3168-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023ca1-12.dat upx behavioral2/memory/3168-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3168-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 568e476042aa6cd19b16487cd31c637cebfa4c4f91c4bc2c5fddf511c0bba177N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-xSxey5QMCeayXkOb.exe
- Size 83KB
- SHA256 a33a9af084ad4147c32d8f33bf25a7990a88bc45c9f66894af7021b3bed0fadb
- MD5 fb76553f7d6d920e4c3233e33e766d0e
- SHA1 02b74795f17b2ebd94a9622660a435d3ffcc5a59
- SHA512 0408e0abf9cb83702893a111429f952789d3d49218bda4e8af5133be8f5626150f72554556d44944b5f4875f7be242569026e3eed76db2331c469a2fe92387ca
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+aK:LJ0TAz6Mte4A+aaZx8EnCGVua
- MD5 SHA1 SHA512 SSDEEP