Analysis
-
max time kernel
91s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-02-2024 13:54
Static task
static1
Behavioral task
behavioral1
Sample
974f3bcc6e164ac4164ee6b91fcb201f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
974f3bcc6e164ac4164ee6b91fcb201f.exe
Resource
win10v2004-20231215-en
General
-
Target
974f3bcc6e164ac4164ee6b91fcb201f.exe
-
Size
160KB
-
MD5
974f3bcc6e164ac4164ee6b91fcb201f
-
SHA1
c40c9522a5a8f981e4be16c20547a184e69298ec
-
SHA256
7ab9d1d711504fc82a3f72fdc877154ba8e5a7d951de844e40ca363bfb7ce289
-
SHA512
0d65ec7049c08a63cf22dfff2503dcb6f985be649f050cba7cb33bd2c791583e317fa6ade81aa9c47ee475c8faf78595ce1e8822a421e265c59e6f5c4ecc5b78
-
SSDEEP
3072:8sDV6AzalWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQA1gFvYGJd6KpZV3uTN9WU/G9h2w59X
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-983843758-932321429-1636175382-1000\Control Panel\International\Geo\Nation 974f3bcc6e164ac4164ee6b91fcb201f.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).