Analysis
-
max time kernel
137s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21-08-2024 01:30
Behavioral task
behavioral1
Sample
dc/17.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc/17.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
dc/4.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
dc/4.exe
Resource
win10v2004-20240802-en
General
-
Target
dc/4.exe
-
Size
1.9MB
-
MD5
8ec6258190b2bde9fa229cc0f2cc847a
-
SHA1
5a7ae09d4725fcba71a423d877d12a2977798119
-
SHA256
682f31b0bbe6f30fb67f5e07d6579241307694116a2cce4397e6a995bc5c8529
-
SHA512
b9c6508bfc82097cbf87d6d829bbe395fd2172d21cd92dae11de7b60b6b0f09c17f307301cf02ccd4240403386899d9ff078b05b6b8cd0ad8a4e7fa927680114
-
SSDEEP
24576:2TbBv5rUyXVP9R4x0iGsLP+m2/4lydP1ziQ3pmTQMX3pzJJ9djnpbNQDsE2+iIlU:IBJPAcWGoQ35kDJ9ye+iIlYiCn
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
4.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4.exe