Analysis
- max time kernel
111s - max time network
93s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 07:50
Behavioral task
behavioral1
Sample
2f8d7ff623f0cb672a65c869d2ebb72302a422f90b8b88044312891cc38f8119N.exe
Resource
win7-20240708-en
2 signatures
120 seconds
General
- Target 2f8d7ff623f0cb672a65c869d2ebb72302a422f90b8b88044312891cc38f8119N.exe
- Size 83KB
- Sample241110-jpfkaashkf
- SHA256 2f8d7ff623f0cb672a65c869d2ebb72302a422f90b8b88044312891cc38f8119
- MD5 35233c22e7e8620e62e125081621d030
- SHA1 30f011f080601dd97606407bb7cc49660c603395
- SHA512 3977d847865fccd896a2fbc71a0e2e3f2f5ec523cf49bf6f040fe2c974fcec65fab2b1c826f30075485513790b5e8e4bab9eb80887862da6f1d2443dcf1c7e74
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+0K:LJ0TAz6Mte4A+aaZx8EnCGVu0
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3544-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3544-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3544-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3544-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0009000000023bef-12.dat upx behavioral2/memory/3544-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3544-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2f8d7ff623f0cb672a65c869d2ebb72302a422f90b8b88044312891cc38f8119N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-oremYSUdZBhlzrWs.exe
- Size 83KB
- SHA256 9a58db9e876385371e8b560f14f2f0412bbc864f307dcf59a775ca69d5526496
- MD5 dfac5183cb06b7b1c8af08558681cf31
- SHA1 c994d512612f85dfd6cbc91a320624d80b82a84b
- SHA512 44b6fd1088531a226b9e8976e99a62f0ef73228b8e86db78f7eb32da022c2b4578fffa1ffc594907418c4639b57b25ab069857680217db5bd3336ccc16f7d929
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK:LJ0TAz6Mte4A+aaZx8EnCGVuJ
- MD5 SHA1 SHA512 SSDEEP