Analysis
- max time kernel
111s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 03:45
Behavioral task
behavioral1
Sample
2036f9d88d54a6eea02983550222d8f1a48f3867ab6cd606b098972354e53170N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 2036f9d88d54a6eea02983550222d8f1a48f3867ab6cd606b098972354e53170N.exe
- Size 83KB
- Sample241110-ea5hmsykhv
- SHA256 2036f9d88d54a6eea02983550222d8f1a48f3867ab6cd606b098972354e53170
- MD5 4c3bd0405ceb8db082246d2132ed6260
- SHA1 895bc181ba3d9ea241da662cea179ff66a1f784d
- SHA512 c8586af2c05225064550dc31aa05bb1311c70834fc00fab4b96137ba8a6b0a780c453a203873e525873385390fbe4e53e22792332e848d3f07fee7195ba7c450
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+iK:LJ0TAz6Mte4A+aaZx8EnCGVui
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3404-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3404-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3404-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023cab-11.dat upx behavioral2/memory/3404-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3404-21-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2036f9d88d54a6eea02983550222d8f1a48f3867ab6cd606b098972354e53170N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-4OXw9ZiDU4vlU5JR.exe
- Size 83KB
- SHA256 60834366ab99252d48856c61bd4ec6f58c16d741dd9f265226ee45bb2180586c
- MD5 4518a1b81904dfc7ff20591da09320ba
- SHA1 8b33f2843b22ee9366f9216500ea6068f5f542b0
- SHA512 912237d06119bd45333b347c540ea51f6d205075e97a539c622f2b06483226341b3a9574811c9135f16944ea0c1d48faa659de82a132b0d629f2ba442dd83821
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K:LJ0TAz6Mte4A+aaZx8EnCGVu5
- MD5 SHA1 SHA512 SSDEEP