Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 21:36
Behavioral task
behavioral1
Sample
40aabd76c3079f1e47d361d4355b9c00812780c044548ed2317dd5fdda8f5396.exe
Resource
win7-20240903-en
2 signatures
150 seconds
General
- Target 40aabd76c3079f1e47d361d4355b9c00812780c044548ed2317dd5fdda8f5396.exe
- Size 83KB
- Sample241109-1fzegavreq
- SHA256 40aabd76c3079f1e47d361d4355b9c00812780c044548ed2317dd5fdda8f5396
- MD5 b603a7873647d5b972cb48b18fb3914c
- SHA1 245f34e5c85c88a28aedcc7a5dee4dd820c1c7d7
- SHA512 f869ff6971e780a7e3486dab17200681e703ae036a79f1b1067b7e98c2c94b474d5bba98f9fbae6a4f9ee1a22c2cb5f112e8dc10cc68fa48876b559cf3b37e93
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+bK:LJ0TAz6Mte4A+aaZx8EnCGVub
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2248-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2248-2-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2248-6-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2248-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c81-13.dat upx behavioral2/memory/2248-16-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2248-23-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2248-27-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 40aabd76c3079f1e47d361d4355b9c00812780c044548ed2317dd5fdda8f5396.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-RkHH7glrbg9FCBrY.exe
- Size 83KB
- SHA256 ec3b93d28b5f073c61adba12194b491eb122ab7bece607db72933ccf6cb59205
- MD5 d9d43d9eb8ab4506da4e61f887b7daee
- SHA1 194ade0062ff58520952eb234ae8cf65c31c02e7
- SHA512 a8dc2ee5064bb5f83ce2fef04af86b3a87c046c98e71ad08b0667790be41f4e4f27d58c727489cae8ffd6a67ef3f8d24a7ddcfe46ce9339405e57508c06f8c58
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+2K:LJ0TAz6Mte4A+aaZx8EnCGVu2
- MD5 SHA1 SHA512 SSDEEP