Analysis
-
max time kernel
94s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
26-07-2024 22:11
Behavioral task
behavioral1
Sample
5f25a49a766f760cc671779fb3d2c330N.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
120 seconds
General
-
Target
5f25a49a766f760cc671779fb3d2c330N.exe
-
Size
46KB
-
MD5
5f25a49a766f760cc671779fb3d2c330
-
SHA1
a38fbbad7193d7398c76d6305b130d077700f35e
-
SHA256
6ad0e9cc9636eaf1d15c9f19b0e0104368e5223c4859db6a3c98ce521fd661af
-
SHA512
9de8093fb91f343f8aa3cacbcce52fbce3928a6970f431706ee29d55d51b1edc6b431559a83ddcec39d281c646c542270c7606964aacb8d482585d810756d0fd
-
SSDEEP
768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7lEuy:CTW7JJB7LD2I2IeH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4412-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral2/memory/4412-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5f25a49a766f760cc671779fb3d2c330N.exe