Analysis
- max time kernel
141s - max time network
122s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
09/11/2024, 23:28
Behavioral task
behavioral1
Sample
744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a.exe
Resource
win7-20240903-en
2 signatures
150 seconds
General
- Target 744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a.exe
- Size 83KB
- Sample241109-3f196stmbx
- SHA256 744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a
- MD5 ccd969e2f30b7a8b47ab974fcdd316d1
- SHA1 5985e4fbdab5a46172dceab1667b3d50a3e07a5f
- SHA512 ec61b72164df9e46b100b9783ee28a729920994e70cfa9ba1a3a5e53c219336496f999a1f2bf3aec52178df34f4815e9832287c1570b32b4a8c57c6a74f2eacd
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+WK:LJ0TAz6Mte4A+aaZx8EnCGVuW
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1708-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1708-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1708-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x000e000000012261-11.dat upx behavioral1/memory/1708-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1708-22-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1708-29-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-4uhf8Fywoz5hIXHE.exe
- Size 83KB
- SHA256 c95832981b3453fe9a6c626e1854a401863cb843e070d1d5d65f858faa6f0cc6
- MD5 f7cbb38f552a6d2b42c4012c59dda063
- SHA1 d24be08b6bfb19e0a6b7e8f8e5266c8dd69ad23f
- SHA512 3eca41205eac56273e8e7c68f0773837dbe237bf04c6b39ac2f9fe47ce85965f1a997643781a159983b061ac04baa11e4656561c7a13c9c73c4940c83b64b222
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K:LJ0TAz6Mte4A+aaZx8EnCGVu6
- MD5 SHA1 SHA512 SSDEEP