Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03/09/2024, 19:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6bcf0658041a2770ce2ecb0b1ad0e910N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
-
Target
6bcf0658041a2770ce2ecb0b1ad0e910N.exe
-
Size
336KB
-
MD5
6bcf0658041a2770ce2ecb0b1ad0e910
-
SHA1
74cd30b14a506518f6b2c8d69d47035e2905a433
-
SHA256
31bd0bd517bfe4b797d07ed5834c6688c74bb1c56f84adf9c8c2686bd087730e
-
SHA512
24ffd0e98a70e18fbc2cfaa5ba7c585ced6223e82345540f24399fb8131425b8b9683c1f8f8cb497d475523006da129e30e536fba6792bef21347646d0d9b3e6
-
SSDEEP
6144:Sr7hkhheL5b+ZTTTBx+Dqn9iin9dgn9BvirtToOGtT4Px47:Sn/L8TTTBx+Dqn9iin9dgn9BvitGe5w
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6bcf0658041a2770ce2ecb0b1ad0e910N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2248 6bcf0658041a2770ce2ecb0b1ad0e910N.exe