Analysis
- max time kernel
110s - max time network
91s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
10/11/2024, 01:17
Behavioral task
behavioral1
Sample
287ee454639e70408144f662426206c865249683082397d926187c0daf5531dfN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 287ee454639e70408144f662426206c865249683082397d926187c0daf5531dfN.exe
- Size 83KB
- Sample241110-bnfvnavrav
- SHA256 287ee454639e70408144f662426206c865249683082397d926187c0daf5531df
- MD5 20fb845f1c3ae29dc7a8e1a093c6b320
- SHA1 834547915a12bcd8b650fc67bdcf3214603401c5
- SHA512 17dc3ffa4a774ac701c7ea5eb4fc7fe03573e5fd6c24b1546ce0c756817c38e1f6a7502a00cb2ce20ec1cb399388ec1d85e0aabad6cfc4375dc771f3b9682cbe
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+UK:LJ0TAz6Mte4A+aaZx8EnCGVuU
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3028-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3028-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3028-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/3028-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/3028-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 287ee454639e70408144f662426206c865249683082397d926187c0daf5531dfN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-kOvwYrjbcVgXNWvM.exe
- Size 83KB
- SHA256 b4d4532b4c2a7079ecfd27b2626cd056a4756325b785f6d6e8bee7762be98aab
- MD5 5ebe017115b2adefef0ab7c1898e8518
- SHA1 bc9dff35d8371558c23d6efeefec3ac3c0adfb8a
- SHA512 07202fd4e5f74572b672cebf8f0bc7b05eae70a0bfc2dc688f0c414a37d86fa09a019f56ee26c11264588285e9738b73cc654cc4c3c8ae7b3af61fe29a873fe7
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+4K:LJ0TAz6Mte4A+aaZx8EnCGVu4
- MD5 SHA1 SHA512 SSDEEP