Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
17/08/2024, 18:30
Behavioral task
behavioral1
Sample
08f252b8de06b7bac47323a48f8bee80N.exe
Resource
win7-20240705-en
2 signatures
120 seconds
General
-
Target
08f252b8de06b7bac47323a48f8bee80N.exe
-
Size
52KB
-
MD5
08f252b8de06b7bac47323a48f8bee80
-
SHA1
9d73fd1aea03843ecaec40dafcdd7d7dfc1342ef
-
SHA256
7d4aef9e3c8bc8d5d94c54cf1c8840b944b030adc09aff8d02b8e1a2b4d1270a
-
SHA512
cc2ca21f60171e5fcb4e54df8f9b11a2ecf48497054635345ea5907d55efbb2fd0aaed6f457c70297a96dfc188d80e091efd4ced92849cf7db99188e3a8e8a44
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKK0SjeQ/OpDsnAWAtG+E7:V7Zf/FAxTWQQRnHAE+c
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2704-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral1/memory/2704-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 08f252b8de06b7bac47323a48f8bee80N.exe