Analysis
-
max time kernel
111s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/11/2024, 13:40
Behavioral task
behavioral1
Sample
a1dbd46821c8e3a7dd1977b02b1e5f5e225c507bb49257edef6b8acfa67ee477N.exe
Resource
win7-20240903-en
General
-
Target
a1dbd46821c8e3a7dd1977b02b1e5f5e225c507bb49257edef6b8acfa67ee477N.exe
-
Size
83KB
-
MD5
1c7f4eac7075916c2c57180a712b4280
-
SHA1
f7a014d26b3ee24025a8482dbbfe307ef6cd55ef
-
SHA256
a1dbd46821c8e3a7dd1977b02b1e5f5e225c507bb49257edef6b8acfa67ee477
-
SHA512
69b31584b1fe771ababf25f703579ca920167431eb7ea783eb005ef2b3e62a9422d435579ef2c0252065f10520e3d3bfbf262a61b4d3c98c3b129e4658b77fde
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+mK:LJ0TAz6Mte4A+aaZx8EnCGVum
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2920-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2920-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2920-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2920-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c81-11.dat upx behavioral2/memory/2920-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2920-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a1dbd46821c8e3a7dd1977b02b1e5f5e225c507bb49257edef6b8acfa67ee477N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5108fd87a37bd070912e758e543e8ae11
SHA108eb1c0291ca56c86c4469e7364e406970b7ccdc
SHA2561f5d3b2eafe2b33b218d39314f7c1b4b451d01e140e11e2424575db9520d6577
SHA5125dcbaaadaae9af6e03cf641c8317003fc01ac10db5252bb359d9480a4d953d544d61f133977d8f8fb02b8738795846e3533a9957a332bb82c22a719de847455d