Analysis
-
max time kernel
94s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03-08-2024 02:45
Static task
static1
Behavioral task
behavioral1
Sample
c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe
Resource
win10v2004-20240802-en
General
-
Target
c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe
-
Size
1020KB
-
MD5
e01e12b8c2cf9614718d5809f6619b2c
-
SHA1
4b09668a1c38632636af4db75f58f6f5f5d79be3
-
SHA256
c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c
-
SHA512
cc0bc04147aab06997812f168a7cda52e99035b9f5c5394e27fe3e1263be75e57ac5b1487265fca3c60cafbd1bcf9af2edbf56d22fb9670a87991cc6b9e91cc8
-
SSDEEP
24576:zQ5aILMCfmARvKYYtJh8DXmB4thd9qiqoMN2AV:E5aIwC+A8JhP5zh
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3968 c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe"C:\Users\Admin\AppData\Local\Temp\c4afddaae546db3c6650de6a6cf15c0ce348161446959489c62c4dfe2c9ad32c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3968