Analysis
-
max time kernel
133s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17-08-2024 00:01
Static task
static1
Behavioral task
behavioral1
Sample
VnHaxLoader-Win32-Shiping.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
VnHaxLoader-Win32-Shiping.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
VnHaxLoader-Win64-Shipping.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
VnHaxLoader-Win64-Shipping.exe
Resource
win10v2004-20240802-en
General
-
Target
VnHaxLoader-Win32-Shiping.exe
-
Size
526KB
-
MD5
0e6c20d060137daab47ad75830808498
-
SHA1
636dd867eeb083b72140ebdb8d08401b8f416b88
-
SHA256
61c627423f19679cd122beffc7dce57bcbd950ab6ea555bcc4e14c5b80d193ef
-
SHA512
6c2b7c7e1a242b0048093b6dbd35fb06144bdc3f042506bcc6becd947aa703b3137a1f5b2f7298df4889c6ac49dde312a66e6b0b7c1d0a04c17ff5a5a736012d
-
SSDEEP
12288:j1mhlCLQ4trCbllXdIUrj9//k/rTcPcYYYgYYYYYYYgYYYYYYgYYYYYYYgYYYYYU:jdJrYjfj9//k//IckY
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VnHaxLoader-Win32-Shiping.exe -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 3244 VnHaxLoader-Win32-Shiping.exe