Analysis
- max time kernel
110s - max time network
91s - platform
windows7_x64 - resource
win7-20240729-en - resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system - submitted
10/11/2024, 04:28
Behavioral task
behavioral1
Sample
6ff90851958571ef36a370da7a5b6f8594cac303b8184fc4ef4e1d5a42960518N.exe
Resource
win7-20240729-en
2 signatures
120 seconds
General
- Target 6ff90851958571ef36a370da7a5b6f8594cac303b8184fc4ef4e1d5a42960518N.exe
- Size 83KB
- Sample241110-e32bpazemg
- SHA256 6ff90851958571ef36a370da7a5b6f8594cac303b8184fc4ef4e1d5a42960518
- MD5 782c4193a5f5c46be9735f183cc4f790
- SHA1 2b99ddc7d06b1c87307c3ada47d45535673b6a78
- SHA512 8816533705ddc628ebff2c406a3393ee6fd7644d6a06359880385d1b85a6909282f25cd3956ba6912a8f976ef768b84ab6dceb90316fe7683ff05a22e631ff3d
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK:LJ0TAz6Mte4A+aaZx8EnCGVuJ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1900-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1900-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1900-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x000a0000000122cf-11.dat upx behavioral1/memory/1900-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1900-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6ff90851958571ef36a370da7a5b6f8594cac303b8184fc4ef4e1d5a42960518N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-mr4Ld0KN0I1xSBno.exe
- Size 83KB
- SHA256 3e9be7de381918881518cf5645455b98966b7422ca6f7ec7c72fa30d975327f5
- MD5 1bb7dd8928f129c17cd4ccc6288fa59b
- SHA1 473a3972086ecf53431db9a8c97fd8c8b49cc8a4
- SHA512 b6c0ef2c21585a6d8303e47938a8a0fff49c51db94e03a0f6bbb62679a59681d233af8799b0295d1a36fa7f49d9467e0d595dd61d21bc178b44441436249a000
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+DK:LJ0TAz6Mte4A+aaZx8EnCGVuD
- MD5 SHA1 SHA512 SSDEEP