Analysis
- max time kernel
111s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 00:52
Behavioral task
behavioral1
Sample
d55edd0a56816dc01420eda9d7e408d485e52d3075406bfa4b6298a1e249e411N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target d55edd0a56816dc01420eda9d7e408d485e52d3075406bfa4b6298a1e249e411N.exe
- Size 83KB
- Sample241110-a76praymep
- SHA256 d55edd0a56816dc01420eda9d7e408d485e52d3075406bfa4b6298a1e249e411
- MD5 d7388243e037b645f80840dcf4c227c0
- SHA1 d71f9f42f205618b148bfea5da9ebf2cbb49b9b7
- SHA512 b9b79fb8146a5f9e35b7885b6470433f12e65523eda6e61f8ca1368f74f7630909061dd3bb0ae27ca76b3ab2a1c8b4801132fe1f5d6bfd224bae5afa613f96d0
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4472-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4472-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4472-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4472-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c9d-11.dat upx behavioral2/memory/4472-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4472-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d55edd0a56816dc01420eda9d7e408d485e52d3075406bfa4b6298a1e249e411N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-tVhiPKrFUYhOIw63.exe
- Size 83KB
- SHA256 bd4f758567804e043cd1483e9b07edbb506317ae6397d2261767538eda4ee4fd
- MD5 61ff65c277ae4e2bd4edfe9cf3d2f0a5
- SHA1 88e774ebab57f49ec7f1e0eec4f575760d0de600
- SHA512 aabfaf2213f1cb9d53c852fdcc2ac8f6e747723d4fb3e6efe653d230df48c949c9cdc38fec4d6eaabb6675cfe501fec438470ab90e8923588ccf7a3f4ed00599
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+2K:LJ0TAz6Mte4A+aaZx8EnCGVu2
- MD5 SHA1 SHA512 SSDEEP