Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03/09/2024, 14:45 UTC
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
datastate.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
datastate.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
sqlite3.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
sqlite3.dll
Resource
win10v2004-20240802-en
General
-
Target
Setup.exe
-
Size
1.6MB
-
MD5
ec539c4a9c60b3690fbd891e19333362
-
SHA1
7cd141b72d9c6701c27f939b790624ebe04668fd
-
SHA256
1d60149ce640f4e07bceeb8940950441025277f1eba4f501f8afe558030b34fe
-
SHA512
b6a3496e7b6f7aed5dcc7e0bb3fe903d2c231ff5470bbedd37e8bea83b1951dc835f32ac6508dea8b561bfd6354e7741227a42eb49fc0575ce64e12b494c00c1
-
SSDEEP
24576:Iz2WcNmHWLyc6+QrRIVkQirZieVPpd27K8mBWSjTUvJ2Npi8TofJ8jH3cT:RNmHyyc63YwQcTjT02NPTofJWXcT
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2380 Setup.exe