Analysis
-
max time kernel
111s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/11/2024, 11:24
Behavioral task
behavioral1
Sample
2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
Resource
win7-20241023-en
General
-
Target
2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
-
Size
83KB
-
MD5
562631ab6a41c295020bff7fe871b9b0
-
SHA1
821ddc9a52ddd28688c1dda2a530dc8469f47e1a
-
SHA256
2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3
-
SHA512
f9f1528fce5159be20a8f2257df7ac9473f6153a90a5a2058001a1c267b63d6637f5a13fac60854ec1e9ddee7146d30ff965240d7de82dc84844d496958b2388
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4392-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4392-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4392-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cb8-12.dat upx behavioral2/memory/4392-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4392-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2334f89d6f0ab221f140f526b202ad45341ab0551129589cf799a70b11ec73d3N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD507e9c8613e416b93cf5de3b19cb70665
SHA1ec4457f83080a13d47ccab6fc60327ff8b07c26d
SHA256b656f5354753f555204c7457cfff53a9d1abf1b855443a81ee3a1124450e20c6
SHA51248228e66c9c5e23d7658334d282510504ded01c37be1e57a8746b6719b3cb88546b772b05ecbd0cfd6aad7e8fffb9992462214a9004356fe9f34e47b6898fbff