Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/11/2024, 11:25
Behavioral task
behavioral1
Sample
194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe
Resource
win7-20240903-en
General
-
Target
194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe
-
Size
236KB
-
MD5
d3084d123933c19ee5f533ad99281320
-
SHA1
81991d9ef425aa31f592adefdac922111cb2e9e6
-
SHA256
194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836b
-
SHA512
00ddcd12f617cc95ecd51e3b6265a05772cb6a92845a7796a0aec7026ba4e82596e705a2df603fcb741d593423d16ccb5039ed9050391796202ee2e67539e6c3
-
SSDEEP
3072:QJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/u/FnncroP9:0wDeM7iNEkgiOb31k1ECgJ/F
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2420-0-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/memory/2420-1-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/files/0x0005000000004ed7-7.dat upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 194ab2a4d45036ea974c94f87affa012980224f44e06a427e09a6524d5ab836bN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
MD5a87cffb471d8212f24818607dbb2dcff
SHA178de45b41a65926052672323a150558768d91d00
SHA256858f78ddb83510014c8d15c20e81878818bee9fb61759d2863e4f32daa44c964
SHA5123408334465e031f1b5a29e2aa618f563c4b2d6690e57c7252260d426af8e74088aa005ce503bb77bb7ce7811b02753ac281c8518961398f579717c532def78ba