Analysis
-
max time kernel
114s -
max time network
100s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
09/11/2024, 13:37
Behavioral task
behavioral1
Sample
18d841cdb306aa44128e889654087c1e0442d8c50542b5233662d9ac7c446dfdN.exe
Resource
win7-20241010-en
General
-
Target
18d841cdb306aa44128e889654087c1e0442d8c50542b5233662d9ac7c446dfdN.exe
-
Size
83KB
-
MD5
005ce2a0b089960e4719ac1ce2ebbdd0
-
SHA1
54dd4b78ee96aa9ecdc3f4d1c026567d1d838bf6
-
SHA256
18d841cdb306aa44128e889654087c1e0442d8c50542b5233662d9ac7c446dfd
-
SHA512
f71d9069dd26d79fe8f110a7e29bcb2da48bc54ea42b11fe49a562fb20c2335e5671068b3e6bb81694e6e277534c09c120f837d1cfd8428a1cb6c812c146046b
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+sK:LJ0TAz6Mte4A+aaZx8EnCGVus
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2332-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2332-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2332-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0016000000005587-12.dat upx behavioral1/memory/2332-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2332-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 18d841cdb306aa44128e889654087c1e0442d8c50542b5233662d9ac7c446dfdN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5ae7d28cd035f41c11cab9384dfd3be76
SHA11d5886324eb65a1cd8a342b4223e774d8c5e82a8
SHA256e5cba94642da7e27e61b3510a17ddc56c0944d8b5f6a38cb34472c6bf8e248e0
SHA512d6ca9150defeaa4cbe3730fa9e380fa67e2363ab8b6a6d174e63f366830856bf71e3a274c7fe551f090c74d86f7fd55ade809fcc0cb63d4035d798455c9ded74