Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
04/09/2024, 14:58
Behavioral task
behavioral1
Sample
9e47c963a2ad3dbb820ff1ea6e17a300N.exe
Resource
win7-20240729-en
2 signatures
120 seconds
General
-
Target
9e47c963a2ad3dbb820ff1ea6e17a300N.exe
-
Size
53KB
-
MD5
9e47c963a2ad3dbb820ff1ea6e17a300
-
SHA1
2247aee0ca65a408e003da46f07345cc05b4188a
-
SHA256
1be09161f847393c311371304c28b7b1e199315e7748b9dcc61c317b264b4a60
-
SHA512
f598c81249964debb89bc70568bc71a913096d15f6094255e733a3f8a41e0d28ccc2e1ca8acf8ec1acf8c4487c14dc7dae6f6e69522322d8e07ff81f9fcc8127
-
SSDEEP
768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBaMYioGXOaiJfoGXOaiJoWAnWAwT3H:CTW7JJZENTBTYM2ltwj
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2528-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral1/memory/2528-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 9e47c963a2ad3dbb820ff1ea6e17a300N.exe