Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21-08-2024 04:02
Static task
static1
Behavioral task
behavioral1
Sample
ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe
Resource
win10v2004-20240802-en
General
-
Target
ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe
-
Size
2.2MB
-
MD5
e37f90f9ae79e240e90dbd32925a92c1
-
SHA1
a4c5c3edfbb9a89523da31ad2f9ce4b929ff26de
-
SHA256
ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44
-
SHA512
cda2e1a1ea031c973b62195b794b971eded6c3a30c249d1c3fb7431276ab26e06aa74734c7fe4ec7225b74f082ff2415cc63dce07434933d64e58688d9e4c198
-
SSDEEP
49152:6LqOxPNvIh4wlPsx859S9Z3YCTA/ABS0v:6LVZlIlCiM
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2204 ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe"C:\Users\Admin\AppData\Local\Temp\ff9ad5c1b6c8c27d0308924ad97920a28e6f25b26fb27ba0ffa4758aebcfdf44.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
PID:2204