Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
24/07/2024, 01:37
Static task
static1
Behavioral task
behavioral1
Sample
aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe
Resource
win10v2004-20240709-en
General
-
Target
aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe
-
Size
468KB
-
MD5
bc2654b885f38219cd83a54a9c52d660
-
SHA1
bba47238955e7ce51b670d6fef5e2ea920fccdf9
-
SHA256
aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742
-
SHA512
9b978c54b0f7aa331748d43391f898995353357f0e49e013c3337420f312877c63d07729563ff0b778ecfd967440676ae60f409bcdab1ed7ef05771cb86f8355
-
SSDEEP
3072:IbAgogI2605ytbYBPYzhff83g4bMPJpCnSHex3hPqaJVWx/uIylo:IbfoB8ytGP+hffJ/ETqa7W/uI
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2952 aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe"C:\Users\Admin\AppData\Local\Temp\aed64ea2f31e7cedbbe2140472cba5532a6d9bd9708ea328e367282392bca742.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2952