Analysis
- max time kernel
111s - max time network
99s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 02:02
Behavioral task
behavioral1
Sample
95b6b54169369bb4dcf3bed37fb7662bdb8e47394f3759fbeeb2ea16438fe24dN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 95b6b54169369bb4dcf3bed37fb7662bdb8e47394f3759fbeeb2ea16438fe24dN.exe
- Size 83KB
- Sample241110-cf4geszmgr
- SHA256 95b6b54169369bb4dcf3bed37fb7662bdb8e47394f3759fbeeb2ea16438fe24d
- MD5 54be87b55bebc640d42bbb0db5d61d00
- SHA1 cd8936a7b244cbc30e4115bb62cd6e103908c73a
- SHA512 6ae45717e8c1d318da591527a653d8e76db4babc43f44666402f5dda43a789a3f6801b4b7ef2371f90c1097d58c7dc4528093d91fdc6d1dd9da23339ddd63ac7
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/384-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/384-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/384-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/384-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023ba2-11.dat upx behavioral2/memory/384-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/384-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 95b6b54169369bb4dcf3bed37fb7662bdb8e47394f3759fbeeb2ea16438fe24dN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-X7X6MTGqVmmdg5Jv.exe
- Size 83KB
- SHA256 28e5e9eb49df355e1a877e2d140838d2ed60fb66aba1add8decc2440ae9c3127
- MD5 1834123cb4ad185eeeefd3df41ff66a4
- SHA1 d83889e9bc214a1fd83356b825a171b32f50aad9
- SHA512 ae2d996f630ac77ca646af45635f2942db1fa1f7629232350a63306f38f71369aa54e2312151eb4b0e3b1df820efdd4a916b8cf2762159c285446c91cc17f2fe
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+HK:LJ0TAz6Mte4A+aaZx8EnCGVuH
- MD5 SHA1 SHA512 SSDEEP