Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
18/08/2024, 02:53
Behavioral task
behavioral1
Sample
002a29aafcd16229becbb7576d0d1c80N.exe
Resource
win7-20240708-en
2 signatures
120 seconds
General
-
Target
002a29aafcd16229becbb7576d0d1c80N.exe
-
Size
479KB
-
MD5
002a29aafcd16229becbb7576d0d1c80
-
SHA1
67dbbdc1e885386ae354efd94e082e770d34243b
-
SHA256
8ebe24d603f13d1142b2bcf1e2eb318520c1579973d8d2fb9c9a72c8d06904ae
-
SHA512
fbe1c75bd4043dea2f6159f8d882b0b02c6b7beea4d19df23602dfa59f43c620d95e8791a469c80eee4027962157fd719b82b0ee063c8222aeb7b54963ec2a8b
-
SSDEEP
12288:VQtAJnhaVFsZ6VkuYBNylnuPR+L286Aja:VIG4VF5sylnuPR627Z
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1292-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral1/memory/1292-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 002a29aafcd16229becbb7576d0d1c80N.exe