Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2024, 10:39
Behavioral task
behavioral1
Sample
e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03.exe
Resource
win7-20240903-en
General
-
Target
e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03.exe
-
Size
83KB
-
MD5
04bcdd6541d695f52b7b57f17c61e002
-
SHA1
104a6c3a9b99694e3ce338ad4eadde59fd910f5d
-
SHA256
e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03
-
SHA512
3d8adf6ff8758452c1471c019ca7c2cb44d78d32f2fa9f86f15f24c819e1300a463b6b58c6a0359c001dc64e05cf261f3b1ecf9caaae6f8abb0237666eae76ab
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+iK/:LJ0TAz6Mte4A+aaZx8EnCGVuia
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3976-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3976-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3976-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3976-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0008000000023caa-12.dat upx behavioral2/memory/3976-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3976-22-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3976-29-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e6c3168d6ffecf439e74c0a89336aacd05083fa0ffe0075c8f9af1b44b65bb03.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5379e7cecb3d2feb0fa80305cdf47429a
SHA111027e80edf6649a46bf6e383abfdf0d50c37c68
SHA25636e09a184f35278c88064aba22872c2f999a63453f313be61740baaee1f785ec
SHA5123562c8c4ce1dbf19267aba105d889a46c818f4347a95e92ab09956c97b5d263dbbf237712aa584f99adb99561d9292e786d819f739c81b4a032a2feab86ef06a