Analysis
-
max time kernel
102s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01-09-2024 07:11
Behavioral task
behavioral1
Sample
d3af71c4c25e5917e61a309fee690f10N.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
120 seconds
General
-
Target
d3af71c4c25e5917e61a309fee690f10N.exe
-
Size
68KB
-
MD5
d3af71c4c25e5917e61a309fee690f10
-
SHA1
233e9a20fc39d82835958914c19d453b61612ece
-
SHA256
b8e39375e5e0de5b0c97c2f1fe651340fd2af81bbd1d4a2f90024566399fdcaa
-
SHA512
bb0d6cf5d490d6153f470d11e10adb8b4290beefd10fa6f2536f78f6f72a921160b387c83cad8c9909a7ddd12e87e34fab1bd0b56e12c5070d88e3d3c751ec7c
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9SBo7Bomu1d:V7Zf/FAxTWoJJ7TFu3
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4428-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral2/memory/4428-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d3af71c4c25e5917e61a309fee690f10N.exe