Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/08/2024, 06:53
Static task
static1
Behavioral task
behavioral1
Sample
51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752.exe
Resource
win7-20240704-en
General
-
Target
51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752.exe
-
Size
2.0MB
-
MD5
5830c0775b887a19fd4c5ee748653e09
-
SHA1
f81859952083ea2200028ac7c06768bcbf677e44
-
SHA256
51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752
-
SHA512
924cb5580625a61d0b0a892acaa95e9c67403862fc6fc29a4b85f388313236c3f5d048416c7c50e72aa7a8dfdae548ec88df76c545657384923ba40df8a74f0a
-
SSDEEP
49152:gVAbwCTx2h3bfEF337LYkDNqxyAnEnNZeZpWV41ktqwaqawPoSSXPbOv:MARTsrfEd379NwyAENZe68kKKoRqv
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2812 setup.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752.exe"C:\Users\Admin\AppData\Local\Temp\51012b3dc1a3052f5fb58ed1740f34cd089669b2d84fe051bf4aaff390870752.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2212 -
C:\Users\Admin\AppData\Local\Temp\7zS4A86DFB7\setup.exeC:\Users\Admin\AppData\Local\Temp\7zS4A86DFB7\setup.exe2⤵
- Executes dropped EXE
PID:2812
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
MD5f234c4f296e58a704363ba1b6547d2e1
SHA1c7d18136a216d13684be54596f6e4d1a2e86f088
SHA256f6e43c32e89ced0b6c0d88e620e23b80a4cc440a838a733ae880b078dd62458e
SHA51264f1a44807f428c004b2e752b39aeb0e8b4310b713fbf90e31dbe16ef40c31866bdc5aa25e3bb6ecaa6523da4b412265cf74e149d20a2ef37d8addc816d14c9b