Analysis
- max time kernel
120s - max time network
96s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2024, 02:29
Behavioral task
behavioral1
Sample
83e1f9868857de0c21c078a058a721a9f27e13d867d2ab100143e520cea56c9bN.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target 83e1f9868857de0c21c078a058a721a9f27e13d867d2ab100143e520cea56c9bN.exe
- Size 83KB
- Sample241108-cyn5fssmfx
- SHA256 83e1f9868857de0c21c078a058a721a9f27e13d867d2ab100143e520cea56c9b
- MD5 2831d7e39104d5965f3eff707fbde810
- SHA1 a96ebab217776f597af94f2360aec1ea02fca87a
- SHA512 c2fbbf43ff167b61efe7243ba06623c9de0bc23081b73ee59a253976744cf8f63f344401c61d05cb507c8012906ad0082ffd7908d7a1b9afedbe0218ad4e32f0
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+hK:LJ0TAz6Mte4A+aaZx8EnCGVuh
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4804-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4804-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4804-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4804-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cbb-12.dat upx behavioral2/memory/4804-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4804-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 83e1f9868857de0c21c078a058a721a9f27e13d867d2ab100143e520cea56c9bN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-Tv8JAnsffzH5lvka.exe
- Size 83KB
- SHA256 6aebbb851af03c191beae06d0cc091aa1413672511a5d025e14f43d2eff92589
- MD5 8724e07cd924beebba2b891f79b6f80b
- SHA1 19bea1ddce085a0a6c3b225ae13950b9e0f2571d
- SHA512 3aa4c85629a2600dd1117042201e9fc0e0149e45657103d83ec4a40f909576a2a8b4e0f540ace5cca7f6ad25a5aca9736751c029df8c1439cea4670cc2e5a1b6
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+jK:LJ0TAz6Mte4A+aaZx8EnCGVuj
- MD5 SHA1 SHA512 SSDEEP