Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
09/11/2024, 22:47
Behavioral task
behavioral1
Sample
7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730dN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730dN.exe
- Size 83KB
- Sample241109-2qvppstfql
- SHA256 7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730d
- MD5 00e125a02701000072156b9e9e505510
- SHA1 e6825d1e8d318c6450c1b884824b90b6bcd0bf90
- SHA512 9374b527f9c560df31f77f1ae519fe5b2f00e784ad8b76a6008114c082a6bac2c197a5679e8a1f84e73cd89e0e7029238029aef6d5cb35b59356cc909e3e305f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK:LJ0TAz6Mte4A+aaZx8EnCGVuP
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2420-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2420-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2420-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2420-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2420-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730dN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-reGk1O1Wnen1NHmj.exe
- Size 83KB
- SHA256 ef8346839c3588cfabac51d85b695304b50ce1f02e86d545b7a3eb62caea018d
- MD5 ae97078accd22a46a0f149b1113e92b2
- SHA1 439ab649e8445ac5bf50dd87a8de18f6c04bebce
- SHA512 4cbcd2d7310b53ac81bded3690a2c37bcb6a77193cffb3f3d31765873c1dff3a6d97c39637fe930467ccdcc59f95e3aa3ecd6ef132eb0bb2f6607a859ca6b384
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+iK:LJ0TAz6Mte4A+aaZx8EnCGVui
- MD5 SHA1 SHA512 SSDEEP