Analysis
-
max time kernel
149s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26-08-2024 05:01
Static task
static1
Behavioral task
behavioral1
Sample
f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe
Resource
win10v2004-20240802-en
General
-
Target
f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe
-
Size
4.0MB
-
MD5
078ff6a79a1b3659e9ad0a4b09cbddb1
-
SHA1
b1de961bb00bf5e756c328d8e07b7bc22101e898
-
SHA256
f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e
-
SHA512
a6f3ecaa0cc64565fea25f8c573ee2298d0705ca8a57402549ba28f96093be83f5504128893abd3ff28ba35e6d76ffb2790657d5da9f91d347633573aedbf47b
-
SSDEEP
98304:b8CB4cnYISftlAHYeQH7zmRenUD2YkTjI+J:b8CBDY1ftsYDbznU/kXz
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2528 f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe 2528 f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe"C:\Users\Admin\AppData\Local\Temp\f6c902d6a3eb03db7224e08c57cf4aa07fe5e14116b44d8ebe9bc1725c6f036e.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2528