Analysis
- max time kernel
111s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 04:35
Behavioral task
behavioral1
Sample
22ef54cdc050ddee276c3aeffc5e64b74a7c239462027e49794cba22d274003bN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 22ef54cdc050ddee276c3aeffc5e64b74a7c239462027e49794cba22d274003bN.exe
- Size 83KB
- Sample241110-e7p48asqbm
- SHA256 22ef54cdc050ddee276c3aeffc5e64b74a7c239462027e49794cba22d274003b
- MD5 3b21af955c52d6f8a7cba910299df250
- SHA1 530e7eee1a3691b4aeb2ad701f1f843a8654f338
- SHA512 7ca3312ee695ca80e221c12630f27d184378612702aef277b29c5be4cf05dc32d2593e5bc3ca5edc3b47fce3ee01bd29feb721da79832c151b3b8bfdbc5ecf6b
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+cK:LJ0TAz6Mte4A+aaZx8EnCGVuc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1284-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1284-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1284-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1284-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1284-11-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023ca1-12.dat upx behavioral2/memory/1284-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/1284-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 22ef54cdc050ddee276c3aeffc5e64b74a7c239462027e49794cba22d274003bN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-hRc9mui563mBDy19.exe
- Size 83KB
- SHA256 4c5a200bc915159b390518632011830dd770cbe2254ea546916d88396e6c3b54
- MD5 1550a694c41589edc41352fde32869ed
- SHA1 393f832572321c32bee6bf938b0e9cf991a30568
- SHA512 8504274d7c9c23a14022d148eb69c9c6cd475dae92231e64b8ad2f4d581524767dcd99cfbed17b5ecd242ebbeabc708a423253c788df597cd159c9c3c2637e69
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+SK:LJ0TAz6Mte4A+aaZx8EnCGVuS
- MD5 SHA1 SHA512 SSDEEP