Analysis
- max time kernel
110s - max time network
99s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 23:10
Behavioral task
behavioral1
Sample
321a64428c291be1ba3022f8b352949bb427fcc12d63d220973689afc69523b6N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 321a64428c291be1ba3022f8b352949bb427fcc12d63d220973689afc69523b6N.exe
- Size 83KB
- Sample241109-25152axjhp
- SHA256 321a64428c291be1ba3022f8b352949bb427fcc12d63d220973689afc69523b6
- MD5 b959d8904a8a53d7bdbfc504287474f0
- SHA1 3737e5c4cac81a9a9223b0a6ab9a8d11278b132b
- SHA512 fc7cf0ba3c9573d9f1339abc26ae5c3a28c9fa5c6743014717e7576c735019d0014703806d5b671c73acc10f57e905566ddf8a8ddad69b5c2322cde5f807c07e
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+KK:LJ0TAz6Mte4A+aaZx8EnCGVuK
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2364-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2364-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2364-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cc6-12.dat upx behavioral2/memory/2364-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2364-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 321a64428c291be1ba3022f8b352949bb427fcc12d63d220973689afc69523b6N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-oveXqQEl4LAf8dPX.exe
- Size 83KB
- SHA256 360e97e8c152ecf48cea789c280f2609005898b314d6a1b95d7f679459b6b5dc
- MD5 cb7fe3679fbfee887d39a4fd28b8d29b
- SHA1 5f999736415af341ab18910a435e5a7572fd4b04
- SHA512 5620b319be9ad87ac61d781e0306ff60479b4bca76c1ca5307c796a5eb7209fc5ed5c23c4c7076f82367bc4256d40e5055171e69963ebc95b7dc01bf29b123c7
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK:LJ0TAz6Mte4A+aaZx8EnCGVuy
- MD5 SHA1 SHA512 SSDEEP