Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03-09-2024 20:16
Static task
static1
Behavioral task
behavioral1
Sample
03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe
Resource
win10v2004-20240802-en
General
-
Target
03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe
-
Size
9.0MB
-
MD5
f330076e07318dea7fc883faf95958d6
-
SHA1
287b25d41e273d60b86098d2dd7b0f55e4918179
-
SHA256
03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3
-
SHA512
dab4e8f37ead922f2a5d14f731defb01aa2d24662687c18c45421a72bed149d0be869856b0a4a826cfcd77039707ab616c5ec87cb596a21e22027c16d707957b
-
SSDEEP
98304:3TsaTTJfMhCWNRP5W1fN7mr6grrBN9WV693E82y/2KDmLhrxB3oQZU04ncjD1MfV:33VuP5W1y6Stz931XmHBHHrF6ZW
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2112 03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe"C:\Users\Admin\AppData\Local\Temp\03dfebcc19d91f8d676f1a0c7bd61f9ebb3c5c43b2450dd75d01b090330d91d3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2112