Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18-08-2024 16:19
Static task
static1
Behavioral task
behavioral1
Sample
b616bf2cf065379c4ce6c105e50389cd004b0951b9ff4db5572348ed00c74fea38.hta
Resource
win10v2004-20240802-en
General
-
Target
b616bf2cf065379c4ce6c105e50389cd004b0951b9ff4db5572348ed00c74fea38.hta
-
Size
162KB
-
MD5
c6cf674c012082a7789b5fa895395503
-
SHA1
f55a3b7e87524bd3b77673749f11937889961641
-
SHA256
6c2931402c355a24deb9edab5a1ad5544abac720613f78a1493e9a624b5aea0f
-
SHA512
db67eff748f3dc2486c2ed784dfb8e9d6bb40f18178d4c75f7dd4326e9ba892acc7cc4e6d63f35344be3fcd823f4d3d729748123aee9c66464542afddd1d4158
-
SSDEEP
1536:tCLijO1goUF/deCLijO1goUF/dvZufi1BWLGjExdoAAlwCOOKKKLTpS1JINvI705:MjV+FnjV+FvTjV+FajV+F
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mshta.exe
Processes
-
C:\Windows\SysWOW64\mshta.exeC:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\b616bf2cf065379c4ce6c105e50389cd004b0951b9ff4db5572348ed00c74fea38.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}1⤵
- System Location Discovery: System Language Discovery
PID:3556