Overview
overview
10Static
static
10Videos/64/64.exe
windows7-x64
1Videos/64/64.exe
windows10-2004-x64
8Videos/64/86.exe
windows7-x64
3Videos/64/86.exe
windows10-2004-x64
6Videos/64/...E.html
windows7-x64
3Videos/64/...E.html
windows10-2004-x64
8Videos/64/dump.bat
windows7-x64
9Videos/64/dump.bat
windows10-2004-x64
9Videos/64/mimidrv.sys
windows7-x64
10Videos/64/mimidrv.sys
windows10-2004-x64
10Videos/64/...tz.dll
windows7-x64
1Videos/64/...tz.dll
windows10-2004-x64
6Videos/64/mimilib.dll
windows7-x64
1Videos/64/mimilib.dll
windows10-2004-x64
8Videos/64/...ol.dll
windows7-x64
1Videos/64/...ol.dll
windows10-2004-x64
8Videos/Adv...69.exe
windows7-x64
4Videos/Adv...69.exe
windows10-2004-x64
6Videos/Cap...E.html
windows7-x64
3Videos/Cap...E.html
windows10-2004-x64
8Videos/PsExec.exe
windows7-x64
3Videos/PsExec.exe
windows10-2004-x64
8Videos/PsExec64.exe
windows7-x64
1Videos/PsExec64.exe
windows10-2004-x64
8Videos/READ_NOTE.html
windows7-x64
3Videos/READ_NOTE.html
windows10-2004-x64
8Videos/crypt154.exe
windows7-x64
10Videos/crypt154.exe
windows10-2004-x64
10Analysis
-
max time kernel
12s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
17-02-2025 11:29
Behavioral task
behavioral1
Sample
Videos/64/64.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Videos/64/64.exe
Resource
win10v2004-20250207-en
Behavioral task
behavioral3
Sample
Videos/64/86.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Videos/64/86.exe
Resource
win10v2004-20250207-en
Behavioral task
behavioral5
Sample
Videos/64/READ_NOTE.html
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Videos/64/READ_NOTE.html
Resource
win10v2004-20250211-en
Behavioral task
behavioral7
Sample
Videos/64/dump.bat
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
Videos/64/dump.bat
Resource
win10v2004-20250211-en
Behavioral task
behavioral9
Sample
Videos/64/mimidrv.sys
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Videos/64/mimidrv.sys
Resource
win10v2004-20250207-en
Behavioral task
behavioral11
Sample
Videos/64/mimikatz.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Videos/64/mimikatz.dll
Resource
win10v2004-20250207-en
Behavioral task
behavioral13
Sample
Videos/64/mimilib.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Videos/64/mimilib.dll
Resource
win10v2004-20250207-en
Behavioral task
behavioral15
Sample
Videos/64/mimispool.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
Videos/64/mimispool.dll
Resource
win10v2004-20250211-en
Behavioral task
behavioral17
Sample
Videos/Advanced_Port_Scanner_2.5.3869.exe
Resource
win7-20250207-en
Behavioral task
behavioral18
Sample
Videos/Advanced_Port_Scanner_2.5.3869.exe
Resource
win10v2004-20250211-en
Behavioral task
behavioral19
Sample
Videos/Captures/READ_NOTE.html
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Videos/Captures/READ_NOTE.html
Resource
win10v2004-20250207-en
Behavioral task
behavioral21
Sample
Videos/PsExec.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Videos/PsExec.exe
Resource
win10v2004-20250211-en
Behavioral task
behavioral23
Sample
Videos/PsExec64.exe
Resource
win7-20241023-en
Behavioral task
behavioral24
Sample
Videos/PsExec64.exe
Resource
win10v2004-20250211-en
Behavioral task
behavioral25
Sample
Videos/READ_NOTE.html
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
Videos/READ_NOTE.html
Resource
win10v2004-20250211-en
Behavioral task
behavioral27
Sample
Videos/crypt154.exe
Resource
win7-20250207-en
Behavioral task
behavioral28
Sample
Videos/crypt154.exe
Resource
win10v2004-20250211-en
General
-
Target
Videos/64/86.exe
-
Size
1.0MB
-
MD5
6c9ad4e67032301a61a9897377d9cff8
-
SHA1
655979d56e874fbe7561bb1b6e512316c25cbb19
-
SHA256
e81a8f8ad804c4d83869d7806a303ff04f31cce376c5df8aada2e9db2c1eeb98
-
SHA512
1cd75a4c324365735a97001b55e89b936daed5d003ba7059f885eeca4a26eaaa82041450d77483a36d4be30186730c4e4ca4b8af24122fe403c4dde738d3ff96
-
SSDEEP
24576:EuS0VSrYkTp5VFyI0UZK6zU9T8zPnbJFDhOky0c:EuS0O59cX2YcPb7DhCN
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 86.exe