Analysis
-
max time kernel
102s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2024, 07:05
Static task
static1
Behavioral task
behavioral1
Sample
c0828db326c8ab95c77ca646feff11b0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0828db326c8ab95c77ca646feff11b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c0828db326c8ab95c77ca646feff11b0N.exe
-
Size
581KB
-
MD5
c0828db326c8ab95c77ca646feff11b0
-
SHA1
1b749ffd4cad216eb25b3d50052389f7df28d9c7
-
SHA256
3227e08cde63c2422c21f78613ea7ad953e3bcff0f640bff3730174acd5393db
-
SHA512
29450d69160378747925c26dad0f57ece03801148157f01b5c9af5a459e4472f296c750bbc099ff55d5dd0970eb2ca7c723275f1f695944de28e132b2663aa5f
-
SSDEEP
12288:SFMR6O38Z6RK/XqPQS/vilXR9FBjrIk1TLYhtsFRE:SFmQ/y3GR9FBjXT8gE
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c0828db326c8ab95c77ca646feff11b0N.exe