Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/11/2024, 11:29
Behavioral task
behavioral1
Sample
4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2N.exe
Resource
win7-20240903-en
General
-
Target
4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2N.exe
-
Size
83KB
-
MD5
bd3bf02b8239129c84b767b3da6bcf70
-
SHA1
fb625fa29b069b6c32ea3ddecd5af5af81a4220c
-
SHA256
4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2
-
SHA512
014feb2b7fb340129577356ed941f6a10e505b11bb2505b32215d8ebfb55cf07bbeaa19ac1a59535e8b96db658b7c5fcb9a7f291ffddd645511cc67ac4e75db5
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+cK:LJ0TAz6Mte4A+aaZx8EnCGVuc
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2480-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2480-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2480-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2480-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2480-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4e999d5cba854cf4a74d6cd1a1d223abbeeeb7529290108f93ad636f72ee2fc2N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5ada41b5ae59619d72f5b9cd836d38eff
SHA19a2eef5ceec852b5780799d1ff64d9beae248a93
SHA2565f391663e9d7f9cdc57e56903f860e0d9772c0b35048e6b2c47a5a35b7dc18a2
SHA512cdf0ba288a9c6da31dab95d82e0984fb6bb42f17f53bd4baf94bbd7592775dcbf034446e1e1d49fd848aec4db0526d5494ff5847d30413e82e9f21d2513d0b92