Analysis
- max time kernel
111s - max time network
93s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 01:05
Behavioral task
behavioral1
Sample
e6148c2c7d0c9090fd3b19e03e430c21efbe5c32e555ad6c0473bb4caab3f048N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target e6148c2c7d0c9090fd3b19e03e430c21efbe5c32e555ad6c0473bb4caab3f048N.exe
- Size 83KB
- Sample241110-bftfsawdkj
- SHA256 e6148c2c7d0c9090fd3b19e03e430c21efbe5c32e555ad6c0473bb4caab3f048
- MD5 8fd528ae06093a43ed475e13a0b64970
- SHA1 a27aec94f59f34804fa98fbbbe80a4bfdb38e8e2
- SHA512 5cf7314661c2351202feada9e4c11f7e12b56c50a1e28c398c6f3350cdcb14dfaab45cafb14726cd8385beea26b835f602192ba4c38aa836716ca72b0f86851f
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+dK:LJ0TAz6Mte4A+aaZx8EnCGVud
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4988-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4988-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4988-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0002000000021f4b-11.dat upx behavioral2/memory/4988-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/4988-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e6148c2c7d0c9090fd3b19e03e430c21efbe5c32e555ad6c0473bb4caab3f048N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-MQJPvouk9FwQwRju.exe
- Size 83KB
- SHA256 5c82c283d2be675c5263c54121ed1769bc134fe86929826a8cef198e897c8ff9
- MD5 d99cd2c342bcc000168a4f5395a81edf
- SHA1 16feeebf84c633789daac2c69626c98785033546
- SHA512 53ebf860d6b7ecf3d09239557e3112f368a33a7facc0bf793ad4a5bf0fd4b13276e0a8f7144931c741b2f60d11d3b96d71dd097de904ca90eb6652d420ad2fb6
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+WK:LJ0TAz6Mte4A+aaZx8EnCGVuW
- MD5 SHA1 SHA512 SSDEEP