Analysis
- max time kernel
111s - max time network
97s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 01:00
Behavioral task
behavioral1
Sample
78999b7644c94a2531a751b654c25345ee63f021511b1671a74bcb30967cf8feN.exe
Resource
win7-20240729-en
2 signatures
120 seconds
General
- Target 78999b7644c94a2531a751b654c25345ee63f021511b1671a74bcb30967cf8feN.exe
- Size 83KB
- Sample241110-bcylbsynep
- SHA256 78999b7644c94a2531a751b654c25345ee63f021511b1671a74bcb30967cf8fe
- MD5 5bdea8e281c1a172ea3271ece5e2bbb0
- SHA1 97eb0c438790d11a8fa035853d67579dfc72b522
- SHA512 9211b1b5b9bb33ed606af2dc5bdbf59e602cdcd2e2515b86fda0c13b0414df323571bf7bd57cc1906b405ccf8af685e8d859a4b600815355107c1231a339b16a
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+iK:LJ0TAz6Mte4A+aaZx8EnCGVui
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5052-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5052-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5052-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5052-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b52-12.dat upx behavioral2/memory/5052-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/5052-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 78999b7644c94a2531a751b654c25345ee63f021511b1671a74bcb30967cf8feN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-AaQCfiTuNgo5JpPh.exe
- Size 83KB
- SHA256 574c78a77e2bea57f1309aa3c73bb22343838b5e9a574d7a5f76417b90285250
- MD5 b7c2c91bbb8c6443e452b3bf3ef0fa6d
- SHA1 9010938f5e7e292189979d30956e3fb791412916
- SHA512 f821ba3cdc2130a36a9f5706ac9b0b8ea3e49b372a29b43cff8d958565d45f437b3532ba36bc7f062fba872c4423631c600188ef167f7d4ed8564b60cf361023
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+4K:LJ0TAz6Mte4A+aaZx8EnCGVu4
- MD5 SHA1 SHA512 SSDEEP