Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/11/2024, 18:21
Behavioral task
behavioral1
Sample
e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
Resource
win7-20240903-en
General
-
Target
e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
-
Size
83KB
-
MD5
68a9afbd1fa8625873b5200c0e385120
-
SHA1
b5cbd77c70231db89da694e7d07362d594eff708
-
SHA256
e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9
-
SHA512
58657eb2d5f41e38f08a3ffb2a0008edca8f9fd6c4cf5a0c47acd7158819adb7704e796500d41040d904f37b41ce9e7fe597b6195c38a4cf9a4d53a73b6d181c
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2240-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2240-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2240-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2240-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2240-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5d656eb499e635959ff47656bd3a51cd7
SHA175a2c82e4003caa079b4cd974abf2239843df1ab
SHA2568c4f46cb38bec0c93062515fe10105538272a4d57db23932a15debf8b7028243
SHA512bb917e3c1a063380fb0b46c12550e22592d51123d915b86ca38eea487f92400e1b8815b19e146ce06b1b2d907073cc74875acc5ca4e72689892affeb2172f1a7