Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20/08/2024, 19:08
Static task
static1
Behavioral task
behavioral1
Sample
362a341ea58f2520e00f00dc9d7add80N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
362a341ea58f2520e00f00dc9d7add80N.exe
Resource
win10v2004-20240802-en
General
-
Target
362a341ea58f2520e00f00dc9d7add80N.exe
-
Size
1.0MB
-
MD5
362a341ea58f2520e00f00dc9d7add80
-
SHA1
75af3abefd513728d1bc9adc2636888d561f4034
-
SHA256
3ba81697302431ce4f09280c5b32bcdc3275874899f682756352317ec6cf3053
-
SHA512
7a9fd90d1f817d5e54d73323aa5a614fd5b435f3861d8d2a0f32ed30ff2dd3463d5901d13617eb845f504104762e52b9a20089733c8e297346dbd16639feb852
-
SSDEEP
24576:zQ5aILMCfmARvKYYtJh8DXmB4thd9P6yZbquJC:E5aIwC+A8JhYZrC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 362a341ea58f2520e00f00dc9d7add80N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2500 362a341ea58f2520e00f00dc9d7add80N.exe