Analysis
- max time kernel
111s - max time network
97s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 23:02
Behavioral task
behavioral1
Sample
e5d287dab4ac88b9b115afaa8e31e044eb2be6e88768f8b0420ada9cb4d79a55N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target e5d287dab4ac88b9b115afaa8e31e044eb2be6e88768f8b0420ada9cb4d79a55N.exe
- Size 83KB
- Sample241109-2z96ratgrm
- SHA256 e5d287dab4ac88b9b115afaa8e31e044eb2be6e88768f8b0420ada9cb4d79a55
- MD5 61db92ff0a9fbd9340b72124239b57b0
- SHA1 51a33816105d81a93a75cec876c15743cc736bd9
- SHA512 f706f48939854885296891a2f30e329004cea9ea8103941373b67b8c7d30fe9eb57866a661a1d5dacdd210c08de8467ae4b0c39ffeaa4c3494ae36dd023d5490
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+VK:LJ0TAz6Mte4A+aaZx8EnCGVuV
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1088-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1088-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1088-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1088-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023ca8-11.dat upx behavioral2/memory/1088-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1088-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e5d287dab4ac88b9b115afaa8e31e044eb2be6e88768f8b0420ada9cb4d79a55N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-EdhkMqax6XzYZ2jw.exe
- Size 83KB
- SHA256 e9844a276a748a7421ecb6bd55badee4c48f0e4242e47ad4c890687f1769279b
- MD5 898744ef500a54cb15028cb4a82da5f0
- SHA1 de21797452f352f95852c50a14fd1883c7b205c9
- SHA512 417eb90b4257eddfd5b443afa4fdc6d4c22aa9aeda38966bd079338656cbb83c8cea780f0124b0092d250cde978df603388ef4c359bcf569c9914ad69918085f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+9K:LJ0TAz6Mte4A+aaZx8EnCGVu9
- MD5 SHA1 SHA512 SSDEEP