Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
02-08-2024 03:24
Static task
static1
Behavioral task
behavioral1
Sample
4964503a3166007f749c6363423a1d70N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4964503a3166007f749c6363423a1d70N.exe
Resource
win10v2004-20240730-en
General
-
Target
4964503a3166007f749c6363423a1d70N.exe
-
Size
820KB
-
MD5
4964503a3166007f749c6363423a1d70
-
SHA1
7fa72b1f0e6c49ac88f81ea2e1c724d8a879c51a
-
SHA256
e6406846705773512acd2549edcc14e1f2e2c160c357bd67c4597678e5071530
-
SHA512
1ccb96a822d59b66e9e045f7fb1bf5bf9262fba261c2b5e2b236c00234219814e4eaa0a038e5ac1aea89b040eb66831f912ee71e5662e5da3de71e85c0fa2083
-
SSDEEP
12288:zJB0lh5aILwtFPCfmARvuZYARIRs40rFHTmRCGsye3nARobFxds+YyolwDBKz9V:zQ5aILMCfmARvKYYtJh1AajdZxBgX
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4964503a3166007f749c6363423a1d70N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1752 4964503a3166007f749c6363423a1d70N.exe