Analysis
- max time kernel
125s - max time network
133s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
02/09/2024, 19:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
delt.hta.exe
Resource
win10v2004-20240802-en
1 signatures
150 seconds
General
- Target delt.hta.exe
- Size 345KB
- Sample240902-ycdbqawblm
- SHA256 f9017da9bf07e1821c95ffabafb0ca8c36ffe3af3cd8a80ec3c9d6060b8d49df
- MD5 af97ea12970796db02d8755905cc56a0
- SHA1 7a1fc3b84c1d431ef10e9d0b5f398a8e8b7fef3c
- SHA512 c9d8be9f5fa2ecee7a946554264d9dee0be2c36fb565cc62dc430dab1d83892865b3975390ce37483f96876ff3b16161fbd21d18f72c7b78db94836e0912e693
- SSDEEP 6144:0VYIbMos9I7CVYIbMos9I70lP0Uf7eJNHgVYIbMos9I75VYIbMos9I7:0VYIoos9I7CVYIoos9I7cVYIoos9I75d
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language delt.hta.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\delt.hta.exe"C:\Users\Admin\AppData\Local\Temp\delt.hta.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4744
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3980,i,3239535018877284530,3457823197501312703,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:81⤵PID:2108