Analysis
- max time kernel
111s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 22:47
Behavioral task
behavioral1
Sample
7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730dN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730dN.exe
- Size 83KB
- Sample241109-2qvppstfql
- SHA256 7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730d
- MD5 00e125a02701000072156b9e9e505510
- SHA1 e6825d1e8d318c6450c1b884824b90b6bcd0bf90
- SHA512 9374b527f9c560df31f77f1ae519fe5b2f00e784ad8b76a6008114c082a6bac2c197a5679e8a1f84e73cd89e0e7029238029aef6d5cb35b59356cc909e3e305f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK:LJ0TAz6Mte4A+aaZx8EnCGVuP
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4892-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4892-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4892-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023bec-12.dat upx behavioral2/memory/4892-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4892-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7f45e67cc89fe539d7d5993b4f42bfae5af08e2ce5b4cb965004bb957231730dN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-FVW6GP1lo0tcaIgL.exe
- Size 83KB
- SHA256 17ec336fde7a45e65c2cc9dcf52bf7f4481b7889f76b74355cf338fcf8867962
- MD5 ce21b50e4698ed52c7f199fc968fcb65
- SHA1 945376a8e04c2337f4f4492cafd40d7d5cb6fd73
- SHA512 4da6c4ebb42dfd87a0be45edb45ff5f1c0f9016b47221e2ef1e5488fb158c77c517aaa8a83175c2db712f34674527f3831281a72a88671d51109b8a2a7fec0b1
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC
- MD5 SHA1 SHA512 SSDEEP