Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07/09/2024, 07:29
Behavioral task
behavioral1
Sample
3f511e5ca48753bdefe9539f0e1fc440N.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
-
Target
3f511e5ca48753bdefe9539f0e1fc440N.exe
-
Size
131KB
-
MD5
3f511e5ca48753bdefe9539f0e1fc440
-
SHA1
9a215c480c4efdb0e309d5d709bf92d5c02f4df6
-
SHA256
3ac2007032af94677048a943c03d4bd702eabea36a2ee9f95a7871a565cbbe61
-
SHA512
f8b9ebce21cf40c6d2e42708cfc2c44b53d5ff2db13e6f4fd88933a11c5a6213eef5e94e453ea8402abb8c399d28c1c8948266bcbe5dcd0c2de0b24cfc86a287
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TgfGKRljFEwOxW3o/v7V+r:fny1Ef7ljKwOgob0
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/212-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral2/memory/212-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3f511e5ca48753bdefe9539f0e1fc440N.exe