Analysis
- max time kernel
110s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 07:28
Behavioral task
behavioral1
Sample
7884ee66a323bdf319a742487d46a30c10f9b2febb21c26b871132b6829d6bf3N.exe
Resource
win7-20240708-en
2 signatures
120 seconds
General
- Target 7884ee66a323bdf319a742487d46a30c10f9b2febb21c26b871132b6829d6bf3N.exe
- Size 83KB
- Sample241110-jay33ssfmb
- SHA256 7884ee66a323bdf319a742487d46a30c10f9b2febb21c26b871132b6829d6bf3
- MD5 87ae6542c62bf26ece976316bdc005c0
- SHA1 1c786e75149724820cc25287944fe51ac5c1c241
- SHA512 80c3e493a2e01842cf98d3c89f428b469a7dc95bd5bee193f32cf7f52f3852927a1eb9f4cbee64791fc10ceaf49c8f7b097349dc8f6252b4688592890dc7f5c2
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK:LJ0TAz6Mte4A+aaZx8EnCGVuy
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3848-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3848-2-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3848-9-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8c-13.dat upx behavioral2/memory/3848-16-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3848-23-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7884ee66a323bdf319a742487d46a30c10f9b2febb21c26b871132b6829d6bf3N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-hFnbRmUdQLalKing.exe
- Size 83KB
- SHA256 3a3db82b974b5b30adb7b68ed481f0e895c22af6512db130c4ab534056c0505a
- MD5 39fc6ecd1bc558803eb631aa8d69566d
- SHA1 04a4866283cbf34946247de5fb5f27d9c179679c
- SHA512 5f38cb13731c63475229798ca8b7fea892a08788cb19e978c5dadf7933fa43afa64d8f427d9900252ee013e0edda917ee5cd69e3b70014b10ef5a93751379b74
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+mK:LJ0TAz6Mte4A+aaZx8EnCGVum
- MD5 SHA1 SHA512 SSDEEP