Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
05-08-2024 09:35
Static task
static1
Behavioral task
behavioral1
Sample
769d20e01affbb1f865013e60416cb30N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
769d20e01affbb1f865013e60416cb30N.exe
Resource
win10v2004-20240802-en
General
-
Target
769d20e01affbb1f865013e60416cb30N.exe
-
Size
1.0MB
-
MD5
769d20e01affbb1f865013e60416cb30
-
SHA1
8aa598e458dc31f936da2d8224166a6bb422d3da
-
SHA256
bfd1b036fbe419060a6fc163559d0872ba7e926feffc3fa2255a27acd2ccf23a
-
SHA512
ac222fd3bf111d9c8fd7710f925b42fb7a11c9d25e81f5f6030463837dd732842b62f3ea85ded5398969b47a03fb0a4ae54067f85a42509224ef6e350d7af856
-
SSDEEP
24576:zQ5aILMCfmARvKYYwdy2VlmNCQS5eyb+3J5Iae:E5aIwC+Ax4ErLJ6Oae
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 769d20e01affbb1f865013e60416cb30N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2532 769d20e01affbb1f865013e60416cb30N.exe