Analysis
-
max time kernel
111s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/11/2024, 18:21
Behavioral task
behavioral1
Sample
e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
Resource
win7-20240903-en
General
-
Target
e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
-
Size
83KB
-
MD5
68a9afbd1fa8625873b5200c0e385120
-
SHA1
b5cbd77c70231db89da694e7d07362d594eff708
-
SHA256
e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9
-
SHA512
58657eb2d5f41e38f08a3ffb2a0008edca8f9fd6c4cf5a0c47acd7158819adb7704e796500d41040d904f37b41ce9e7fe597b6195c38a4cf9a4d53a73b6d181c
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3312-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3312-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3312-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3312-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8d-12.dat upx behavioral2/memory/3312-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3312-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e1659e46ef6626309f60e6cdce507169d7398fc730b6c1fba907f7e3ce44eda9N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5eeb1b427f956be81307be818a4e8ca9d
SHA1134fa0c2929e2d20a66fe001a81474b0a907261f
SHA25677cb888624086f1d6c523a6e5e7b8338355b328228d660bfaf982981aecdbe26
SHA5128caaa0ede6b6f69e917c2497c392870a968bc1ee6968c9238d0fdbae1d86fb7dc587c26a8f88e67d1dff492792a5cb55d6cc5047ce8e4f8f2f81ce3b5ab1f39c