Overview
overview
10Static
static
509472e7d92...5b.exe
windows7-x64
309472e7d92...5b.exe
windows10-2004-x64
101dd4a0983a...63.exe
windows7-x64
101dd4a0983a...63.exe
windows10-2004-x64
102b10ad4890...a2.exe
windows7-x64
102b10ad4890...a2.exe
windows10-2004-x64
10352b1f3533...49.exe
windows7-x64
10352b1f3533...49.exe
windows10-2004-x64
1045295780f2...b5.exe
windows7-x64
1045295780f2...b5.exe
windows10-2004-x64
104d74af75de...51.exe
windows7-x64
104d74af75de...51.exe
windows10-2004-x64
1060c16e45c5...25.exe
windows7-x64
1060c16e45c5...25.exe
windows10-2004-x64
1075a3cf8ced...6b.exe
windows7-x64
1075a3cf8ced...6b.exe
windows10-2004-x64
107dee29fbeb...26.exe
windows7-x64
107dee29fbeb...26.exe
windows10-2004-x64
108879a8d150...12.exe
windows7-x64
108879a8d150...12.exe
windows10-2004-x64
109b40b0d3b2...13.exe
windows7-x64
109b40b0d3b2...13.exe
windows10-2004-x64
10aaec6ae400...ad.exe
windows7-x64
10aaec6ae400...ad.exe
windows10-2004-x64
10aaf3abc405...af.exe
windows7-x64
10aaf3abc405...af.exe
windows10-2004-x64
10ac94165d63...8e.exe
windows7-x64
10ac94165d63...8e.exe
windows10-2004-x64
10b513cfbd10...da.exe
windows7-x64
10b513cfbd10...da.exe
windows10-2004-x64
10c4bd712a7f...28.exe
windows7-x64
10c4bd712a7f...28.exe
windows10-2004-x64
10Analysis
-
max time kernel
90s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22-12-2024 00:43
Behavioral task
behavioral1
Sample
09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
1dd4a0983a6884dddc3edf27eb5fdfc87664ed63.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
1dd4a0983a6884dddc3edf27eb5fdfc87664ed63.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
2b10ad4890c4d6e2861533cc7260a9fdc7871ea2.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
2b10ad4890c4d6e2861533cc7260a9fdc7871ea2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
352b1f3533ded8c575246d4466f68c49.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
352b1f3533ded8c575246d4466f68c49.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
45295780f2ba837be42ccf50710bd2b5.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
45295780f2ba837be42ccf50710bd2b5.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
4d74af75deddc969fef5fd89e65fa251.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
4d74af75deddc969fef5fd89e65fa251.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
60c16e45c5cbe88a38911f1e3176d90444e4884261d8481d4d719acec1bc5025.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
60c16e45c5cbe88a38911f1e3176d90444e4884261d8481d4d719acec1bc5025.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
75a3cf8ced873ee7bc415e27e108496b.exe
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
75a3cf8ced873ee7bc415e27e108496b.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
7dee29fbeb5af549cb8a68dc47adf9721eb2b726.exe
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
7dee29fbeb5af549cb8a68dc47adf9721eb2b726.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
8879a8d1508c3297200c608f3a93da5387521767c050f17aed78dde8a0cbfe12.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
8879a8d1508c3297200c608f3a93da5387521767c050f17aed78dde8a0cbfe12.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
9b40b0d3b228d9e958c8d45fb8cec64c6851d113.exe
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
9b40b0d3b228d9e958c8d45fb8cec64c6851d113.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
aaec6ae400b38b95ae414481d8d45f0281cf26f59f8592567dfe2223f66024ad.exe
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
aaec6ae400b38b95ae414481d8d45f0281cf26f59f8592567dfe2223f66024ad.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
aaf3abc4054f800aaa429c4f2e4b20af.exe
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
aaf3abc4054f800aaa429c4f2e4b20af.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
ac94165d63c75f4adf1728aa2ecb776ac7c1c18e.exe
Resource
win7-20241023-en
Behavioral task
behavioral28
Sample
ac94165d63c75f4adf1728aa2ecb776ac7c1c18e.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
b513cfbd101e728ec41c9d6f6515278434820466bfe8e4bc1849f2418d3f86da.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
b513cfbd101e728ec41c9d6f6515278434820466bfe8e4bc1849f2418d3f86da.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
c4bd712a7f7185a2224806b85f3c6ac48de067e38d554608b3ee92422d902b28.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
c4bd712a7f7185a2224806b85f3c6ac48de067e38d554608b3ee92422d902b28.exe
Resource
win10v2004-20241007-en
General
-
Target
09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe
-
Size
125KB
-
MD5
66970cb2a5663b9ee15595096bb7d269
-
SHA1
09472e7d9209b7cfc3bbc2e815a2aa843133395b
-
SHA256
dcc3d3684420b9d998f854e68755246eda0d1b5a5d3f0b3e28ea1e82f32b16d6
-
SHA512
2bba4be7e6e7f7959e7298387d0841643cb75904d7fd74032ccfca70fac5bf6b6d43feb6617f4e6d090ec5e671613fd4ad14ac6869ea3ff819d12fa9a96b58cf
-
SSDEEP
3072:Sekw/Vd+ERa90yEJewpM7EXvAWW4bkPn2VO:Nkw/VdhRauyEJed7EXvbR
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe"C:\Users\Admin\AppData\Local\Temp\09472e7d9209b7cfc3bbc2e815a2aa843133395b.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1656 -
C:\Users\Admin\AppData\Local\Temp\zmaGJICkSlan.exe"C:\Users\Admin\AppData\Local\Temp\zmaGJICkSlan.exe" 8 LAN2⤵PID:2736
-
-
C:\Users\Admin\AppData\Local\Temp\sfcqrrVQWlan.exe"C:\Users\Admin\AppData\Local\Temp\sfcqrrVQWlan.exe" 8 LAN2⤵PID:2420
-
-
C:\Users\Admin\AppData\Local\Temp\ypAebZfEOlan.exe"C:\Users\Admin\AppData\Local\Temp\ypAebZfEOlan.exe" 8 LAN2⤵PID:2764
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
125KB
MD566970cb2a5663b9ee15595096bb7d269
SHA109472e7d9209b7cfc3bbc2e815a2aa843133395b
SHA256dcc3d3684420b9d998f854e68755246eda0d1b5a5d3f0b3e28ea1e82f32b16d6
SHA5122bba4be7e6e7f7959e7298387d0841643cb75904d7fd74032ccfca70fac5bf6b6d43feb6617f4e6d090ec5e671613fd4ad14ac6869ea3ff819d12fa9a96b58cf