Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/08/2024, 02:42
Static task
static1
Behavioral task
behavioral1
Sample
2318.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2318.exe
Resource
win10v2004-20240802-en
General
-
Target
2318.exe
-
Size
3.7MB
-
MD5
a0eecaa930fbba04dfd90b11308d4363
-
SHA1
5490a25dfdac76145000dbcdf6ad8989e2cb824c
-
SHA256
dde57073351db3549bdedd60ecc4498c3e0d41cadb5f4b4ef44426482699d76c
-
SHA512
f7624ea7814b1d62eaa1da7c18479bd9dd918c2de7e140aa14bf3fe51196a31054cfca3a1d1b9975f5059835519a9e896b894f33648488a2a9ab726c2d5d2370
-
SSDEEP
49152:Ml+h+1qs0Y/BTmVuGjHnevxGaHJRfBm1TVwV2cRPzJEpneX+DcTiyFWJa3:MlK+19VErjHneUapHmjwlPzJn+wWJa3
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2318.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2276 2318.exe