Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
09/11/2024, 11:24
Behavioral task
behavioral1
Sample
2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
Resource
win7-20241023-en
General
-
Target
2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
-
Size
83KB
-
MD5
562631ab6a41c295020bff7fe871b9b0
-
SHA1
821ddc9a52ddd28688c1dda2a530dc8469f47e1a
-
SHA256
2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3
-
SHA512
f9f1528fce5159be20a8f2257df7ac9473f6153a90a5a2058001a1c267b63d6637f5a13fac60854ec1e9ddee7146d30ff965240d7de82dc84844d496958b2388
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2408-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2408-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2408-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2408-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2408-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5353e8aca4a5ffc3a6057c1687bc18c9a
SHA1d556cf56ab4055c2b11dcd16a62b12bb5c8e1591
SHA256cd1eb323a018e6ea5c26fff5d5b54cab76dfd9dc02757e0035472dd452884fc9
SHA5125dad414686a4426491659a673948134ceeabe9c17a22e2643fbf99c28917d55a72181d64024a9eb1270183b8943abee8b2126d6e84cb5413eac4a8e6198bf342