Analysis
-
max time kernel
119s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
06/08/2024, 17:01
Behavioral task
behavioral1
Sample
d0f5990b5903517a0cd59bd405ad66b0N.exe
Resource
win7-20240708-en
2 signatures
120 seconds
General
-
Target
d0f5990b5903517a0cd59bd405ad66b0N.exe
-
Size
135KB
-
MD5
d0f5990b5903517a0cd59bd405ad66b0
-
SHA1
bf0c172bd5d2e406be6ab0bf76c239c245f344f6
-
SHA256
099e88d47d303ad85aeb60ab2de2b34ad7755db827614c83b01f92fc643910e0
-
SHA512
2a14fd7512bb72598de3fa3201a28dd718582f4f00b0f397269a0b9d02da92c7d5001a4183abe8e1f3df8508c292339e32c5669ce7461db649c6315c6b6ce861
-
SSDEEP
1536:V7Zf/FAxTWoJJXV6T6ybNkHlPdA3NyaM62ot2oxQWW:fny1bJPdA9yaMDT2W
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2280-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral1/memory/2280-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d0f5990b5903517a0cd59bd405ad66b0N.exe