Analysis
-
max time kernel
94s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29/08/2024, 09:21
Static task
static1
Behavioral task
behavioral1
Sample
4897c0a58bdba175ed46a9ceceab5a0a06c1356bb1ff5fb2981bf2c1c6c841b6.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4897c0a58bdba175ed46a9ceceab5a0a06c1356bb1ff5fb2981bf2c1c6c841b6.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
General
-
Target
4897c0a58bdba175ed46a9ceceab5a0a06c1356bb1ff5fb2981bf2c1c6c841b6.exe
-
Size
10.0MB
-
MD5
f70221e831edd44dc90dad48a94d54cd
-
SHA1
37dba6b507f39d60a10f6ad6ced8354a2e1cf1c7
-
SHA256
4897c0a58bdba175ed46a9ceceab5a0a06c1356bb1ff5fb2981bf2c1c6c841b6
-
SHA512
60e37e62fb3b573028aa4158f3b4c865b4b946d54bd91306a395973c3d468bd033a1e2832308765f37a7d9011de1562c4b771dab2e4d90335d597304b7378941
-
SSDEEP
196608:X1w4PNceLPnnKznicdtDZB2GrkHCRlFrHCKYk7prIN:XG41cQPnYRjl4CXFnprA
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4897c0a58bdba175ed46a9ceceab5a0a06c1356bb1ff5fb2981bf2c1c6c841b6.exe