Analysis
-
max time kernel
113s -
max time network
15s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14-08-2024 10:45
Static task
static1
Behavioral task
behavioral1
Sample
cc00a04df623e860b9ba56d9bdaaeb60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cc00a04df623e860b9ba56d9bdaaeb60N.exe
Resource
win10v2004-20240802-en
General
-
Target
cc00a04df623e860b9ba56d9bdaaeb60N.exe
-
Size
76KB
-
MD5
cc00a04df623e860b9ba56d9bdaaeb60
-
SHA1
48847997cc24b9b586fd9830c5052ac3d6ad60cc
-
SHA256
2ab9e8f254323014b1614fad16fb08dd9b984e2f3114c599c59a1025a745fd69
-
SHA512
dbbfbb9ab016f890f6140142607163dd4aa9cbeb4c51ef661ef440eaf615cfc7f81956585a6b4ea2d91ad358bf34f441511f9aeaf36915c4c44dfb04d393d648
-
SSDEEP
1536:MvP69lUyW1UwzJmWRaD1gXI7uMrpzrnacxfzZ1:G69lU2UmWVXI7uMlzTFz7
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cc00a04df623e860b9ba56d9bdaaeb60N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2584 cc00a04df623e860b9ba56d9bdaaeb60N.exe