Analysis
- max time kernel
111s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 23:40
Behavioral task
behavioral1
Sample
584df385573039bb57c72c2d33be7ffb123584caf755aa4c45a9a4649da32ddcN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 584df385573039bb57c72c2d33be7ffb123584caf755aa4c45a9a4649da32ddcN.exe
- Size 83KB
- Sample241109-3pcceatndz
- SHA256 584df385573039bb57c72c2d33be7ffb123584caf755aa4c45a9a4649da32ddc
- MD5 75f1cd914eeeccfd6e116c0d842e0f40
- SHA1 755bea6af2c14b7789981401a3e80679cdafa9e3
- SHA512 ffbb7e7dd2e041e1a20fa1860862e49967531c24035cc4b0b0be76648cd2b2e58003799e1030c906d46a1b7888307e926034dac3d2a0c10bce25c501dabaaf38
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+AK:LJ0TAz6Mte4A+aaZx8EnCGVuA
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4752-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4752-2-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4752-6-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c8f-12.dat upx behavioral2/memory/4752-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4752-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 584df385573039bb57c72c2d33be7ffb123584caf755aa4c45a9a4649da32ddcN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-y0dbS9SREVrB442A.exe
- Size 83KB
- SHA256 e12b2e1236930987813fe2768e057aa29f7ed06ad3ec3e1eb8f87e294fbac2e6
- MD5 db5633198dca416bae9c5be64861131c
- SHA1 9861da2a6f337a26e874b944dcddd949015f7390
- SHA512 fcd63f51238e6d4313201eca518142a3b1c137e6a00d379c7e36642327febd6849539c198ea903e8bbf23078908f6119660faa1085d0f436b124dc0e2aefc254
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+XK:LJ0TAz6Mte4A+aaZx8EnCGVuX
- MD5 SHA1 SHA512 SSDEEP