Analysis
- max time kernel
111s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 07:32
Behavioral task
behavioral1
Sample
d9512967e076a939e1dfebf71493fea106148e42a40a9a2d92ea5459606a95c8N.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target d9512967e076a939e1dfebf71493fea106148e42a40a9a2d92ea5459606a95c8N.exe
- Size 83KB
- Sample241110-jdcdgssdrm
- SHA256 d9512967e076a939e1dfebf71493fea106148e42a40a9a2d92ea5459606a95c8
- MD5 2614763ce878febec338cad9de429400
- SHA1 a40464e65a5d64ff63c335f5dd4acf857eb46302
- SHA512 66b07290e1f9b6ee498d754cceb4a3dbf12879955825e33d05f31712090c86f13f044645891169ab38458c2ca466111b2904a956656a7f37f7c2f7c18806c2aa
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+9K:LJ0TAz6Mte4A+aaZx8EnCGVu9
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/720-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/720-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/720-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/720-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023c77-12.dat upx behavioral2/memory/720-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/720-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d9512967e076a939e1dfebf71493fea106148e42a40a9a2d92ea5459606a95c8N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-v5eULC0PVvCL1gN3.exe
- Size 83KB
- SHA256 3fc3489f2c30add8334586af907602837c803a78f755ecd6bf1ac466f7d7d389
- MD5 b51d87804c8e4af208da1faa16e31129
- SHA1 8dba6ae0ef51cba0e73ccdaf529cb647c38811f2
- SHA512 390394ebeaa310d1a6588706bc5d8df627d81c68d74fc2483c7eaf0b0ce4b50f4159dd9b0f34f9d1f24afb298563acf3cb5dffab77d65f4f4e6ce3a819796250
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK:LJ0TAz6Mte4A+aaZx8EnCGVut
- MD5 SHA1 SHA512 SSDEEP