Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
01/09/2024, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
e332e16c5c99dab4ebcbce84010a04f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e332e16c5c99dab4ebcbce84010a04f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e332e16c5c99dab4ebcbce84010a04f0N.exe
-
Size
3.6MB
-
MD5
e332e16c5c99dab4ebcbce84010a04f0
-
SHA1
3df7777e1a4f10fd6b1367a3342bedab9101aea5
-
SHA256
a3574d9316ca26b80e3056a2e32a82cd11aff7ce5dea725bc3dd0e4560ab5429
-
SHA512
96391feb7439dac2c62a92d52f8ddfc952d328f8b5d465aba5728cdcd7bb9f25faf2a5a5f018a7108c2957b84be864d6b169df3bbbdbbfa37beb5d7ea66f8ec2
-
SSDEEP
98304:GqDD06jIk4Iu7KR3Va9a7tgeyiy8OM2519jiuUs62r6C:TD06jIrTm3VaE7tgZ8C5GsMC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e332e16c5c99dab4ebcbce84010a04f0N.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1724 e332e16c5c99dab4ebcbce84010a04f0N.exe 1724 e332e16c5c99dab4ebcbce84010a04f0N.exe 1724 e332e16c5c99dab4ebcbce84010a04f0N.exe