Analysis
- max time kernel
140s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 23:28
Behavioral task
behavioral1
Sample
7498833bbf2b034c3847b5a1b3f36197466da64a8dedca30e170b4179ec708a2.exe
Resource
win7-20241023-en
2 signatures
150 seconds
General
- Target 7498833bbf2b034c3847b5a1b3f36197466da64a8dedca30e170b4179ec708a2.exe
- Size 83KB
- Sample241109-3f9asavbpg
- SHA256 7498833bbf2b034c3847b5a1b3f36197466da64a8dedca30e170b4179ec708a2
- MD5 0319711a1c6dd9ab39e37f9a841c9c51
- SHA1 5a4ec5f1f16be50e74f67cfe917848406aa1e81f
- SHA512 1a9ba620fc4629ebe7d70e77e51df14c3c47591cf24236fc0a38ecbf54da2f4fbadd52d40da47dee75812fa92da247a7a1947a6e997acf4b55018b84f158a150
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3264-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3264-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3264-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b7e-11.dat upx behavioral2/memory/3264-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3264-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3264-29-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7498833bbf2b034c3847b5a1b3f36197466da64a8dedca30e170b4179ec708a2.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-z8sqRGCFBTfZIcoN.exe
- Size 83KB
- SHA256 8931f3e8637ad36c790c7c273d30ba9749ac31f2dbad27bda03c716a63f43f0e
- MD5 a0b00ba886446cb554f32011e794b16c
- SHA1 d87ffaf183c0e9667428829cee16cc9f00e9b1a9
- SHA512 41bf1a57e9d98d4351e0990cb438e1e68556731e35f81b50ca50139ea47c3aedd1eed0501069d378857e3a1ad23fb4e432194ea8dbe4a2e6bc4587f5b9f95917
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD
- MD5 SHA1 SHA512 SSDEEP