Analysis
- max time kernel
120s - max time network
96s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 21:56
Behavioral task
behavioral1
Sample
e67f9e013a2a0ecd45bdf021689b47d8f31b0d90df9db4796a66626beaa13798N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target e67f9e013a2a0ecd45bdf021689b47d8f31b0d90df9db4796a66626beaa13798N.exe
- Size 83KB
- Sample241109-1tebfstbmn
- SHA256 e67f9e013a2a0ecd45bdf021689b47d8f31b0d90df9db4796a66626beaa13798
- MD5 f195f288789879cd4a493e3bee18dcc0
- SHA1 0056c813390b9f3e5583f64b73ed2ea2cd79ce67
- SHA512 99743bbb843f0dc5138d654b7d7e3366693d4e18aafe73124969a7301dff72e7301dd08da8dc5a33880ef6ffda1b8987bebfb957c066fd62005cc955a2260d28
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+gK:LJ0TAz6Mte4A+aaZx8EnCGVug
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/456-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/456-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/456-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/456-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023bca-11.dat upx behavioral2/memory/456-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/456-20-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e67f9e013a2a0ecd45bdf021689b47d8f31b0d90df9db4796a66626beaa13798N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-nNEobUbWcKSKmNRU.exe
- Size 83KB
- SHA256 94f147beb3a05595cc7bd36fe8b4b8833e96eac9553bce0de59d9f7c244bfb42
- MD5 be8d843d4517abbb108a93d8f9634294
- SHA1 23fcfa91a35b8792d3ac830e78014abd48679fc9
- SHA512 08aa526c2e2b3af8177e2be53ec473a14e80b7aebea6721f4e44f368e2a2792dc42d2342670d07ea53d335e5998e6226cae371f883a030248cfd1f8ee91a88da
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+eK:LJ0TAz6Mte4A+aaZx8EnCGVue
- MD5 SHA1 SHA512 SSDEEP