Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2024, 19:47
Static task
static1
Behavioral task
behavioral1
Sample
af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe
Resource
win10v2004-20240802-en
General
-
Target
af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe
-
Size
10.6MB
-
MD5
ded1ecaf2902b8a0b84be56349fe0d44
-
SHA1
489018720d9ea626a60dd978b0d095d5f6cdd929
-
SHA256
af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2
-
SHA512
d467ac185964d567567e9e51fb658181bdba8f56d03c1065075f4a0337b2db8ef212a4b5c0b966ebed60c095d8d9f48fcbd9c302fbd738620c2d825478fe0adc
-
SSDEEP
196608:aAqY+3AhmhutQx6r6vW1jV2aLZ/XbCG0rO3WdfijA6hsg0soBgZ:aARtLHl0g5LIddfijAAbEKZ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4936 af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe 4936 af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe"C:\Users\Admin\AppData\Local\Temp\af02c270c3260ae7c1b230e4ce2f984ca195b767ca84621557e83f78acc46ae2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4936