Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20250207-en - resource tags
arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system - submitted
21/02/2025, 23:06
Behavioral task
behavioral1
Sample
adm_atu.exe
Resource
win7-20250207-en
2 signatures
150 seconds
General
- Target adm_atu.exe
- Size 5.9MB
- Sample250221-23frbasrdj
- SHA256 dd10da537068ac4f365cd9eb6bbaba113d20f00d6d20e17293a941c88fac8214
- MD5 edba371fc961a2f4519f533f88f2c37a
- SHA1 c069d2dc5f7783fd0fa11bd357593e3c001daaa9
- SHA512 a891fedeb6c16a33fe5472b68eff32f49d707f034cd05b896e1a23fc61e50ce86f224e130c0564504c9b0f52a2a7afe71f92f818bf3a6300ab8e3a392de1d9fb
- SSDEEP 98304:CPJbiYJEWQr3AkrJ0bAo8RoIqZN3lQjeZJJP2Omj8Sste0AbD5ZF+9xT76MOs/cN:0lii3QbhVqesZTZ+84Zk9xSm/pBC2S
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1192-0-0x0000000000400000-0x000000000041B000-memory.dmp upx behavioral1/memory/1192-17-0x0000000000400000-0x000000000041B000-memory.dmp upx behavioral1/memory/1192-25-0x0000000000400000-0x000000000041B000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language adm_atu.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\FE9B46.tmp
- Size 127B
- SHA256 0c63d3bad7115c0ce5cdb6cefb405842c5603b4e468acf98c8e798e071c405cc
- MD5 5c05c0c65725b41711e2d1a61b1d450d
- SHA1 174fff7c909c2d887c98c05e721a21482632636f
- SHA512 292ec97f06aa51c90dfacd0965a9232413cad2f8abcd57838bc18c24fb1f5e86ac0e74e561ed7cda8c3e5f5720db4c23f4983d733149bacc47bfa36d2231962b
- MD5 SHA1 SHA512