Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
06-08-2024 08:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3.exe
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
3.exe
-
Size
1.3MB
-
MD5
246d6d7a9ec9d72555e737c55bee2333
-
SHA1
ad251cad0f2e8e9ae9cff307fc5bf2159ef4618a
-
SHA256
6b8e69734ce8e917a44ee51a7b8dd8623544e52a5f9477e69da4b6f3c39080a8
-
SHA512
92261275ad39992c28cd7a81f31bda7d937c3ee6289946eac5d17d907ab15cd5704b73d0374f9db2d0d55d4babb41f494823eace9072da31984ed7c0bae2f858
-
SSDEEP
24576:JAmoJC+sowTSMPC877DdBVR1jMz3lRP5WfrBy8i1RiV:9y3MPl77DdBVAjArB/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3.exe -
Suspicious behavior: EnumeratesProcesses 51 IoCs
pid Process 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe 2716 3.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2716 3.exe 2716 3.exe