Analysis
- max time kernel
120s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 07:32
Behavioral task
behavioral1
Sample
4bcee98a20867c31376b70fe551a5f3dffaff34fe978d41cce8081c066c8293aN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 4bcee98a20867c31376b70fe551a5f3dffaff34fe978d41cce8081c066c8293aN.exe
- Size 83KB
- Sample241110-jc4rcasfpg
- SHA256 4bcee98a20867c31376b70fe551a5f3dffaff34fe978d41cce8081c066c8293a
- MD5 e11da86479b0d42f7ae93cf13540f590
- SHA1 e97d2a82a1cddf87a5a051241ac1f98dba472813
- SHA512 da70ccdf828916c57db4b5725fc25b8b230f3a94b4db1c099257c531580a0fb29c2ab3ddfb1da99e87dd423437e1f0653f03d3e3566de65ad7983c3415f4bd70
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+1K:LJ0TAz6Mte4A+aaZx8EnCGVu1
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2432-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2432-2-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2432-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2432-9-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000b000000023b8d-13.dat upx behavioral2/memory/2432-16-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/2432-23-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4bcee98a20867c31376b70fe551a5f3dffaff34fe978d41cce8081c066c8293aN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-yBQ3rX5hViMahy9U.exe
- Size 83KB
- SHA256 442fe12fd33f375792c713b697dfbb4181738b22e147fd3c3380e9aa42d100c8
- MD5 23f3d17ea23aa41da78a1ce0bc0dbf1d
- SHA1 5a7a98dae61364dc40ae52a20670f5ee3391fc9a
- SHA512 357a9c93137ea09ee5cd9c873e7120e378e0cef54801cd3a16b5fa563f15d3019bfdeef474a7b0f7944cf7d264101fec069414fc18e0bcbf0acf7e608fee20d9
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8
- MD5 SHA1 SHA512 SSDEEP