Analysis
-
max time kernel
111s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07-09-2024 07:37
Behavioral task
behavioral1
Sample
战龙之魂长久微变.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
战龙之魂长久微变.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
战龙之魂长久微变.exe
-
Size
3.8MB
-
MD5
6409fa59785e9ce7dc25c49f780bd25e
-
SHA1
cc49fbbe2e42e7193fff6d3ee372be2ca37f427e
-
SHA256
7b39d122804c5f7c43868193e30fe8ac676f50d093badf71657ec7999389d487
-
SHA512
dcc05e4c098ddf014deee58817f098b21364fb4545e61c728ce29bee6f075bd84408166e452b94e7a4ddf36bfe78149946a96319c82f2f644a107bb2c3b999dd
-
SSDEEP
49152:rCLnU7EoBZf4KkUzNmiXs7c8F6M8ZK9bekyHa0FMDxymDsuz6D60zkpyBo4skQQZ:2IBRk0fPeh0OtQuuD9ztoyrQ6LIwpulq
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 战龙之魂长久微变.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4708 战龙之魂长久微变.exe 4708 战龙之魂长久微变.exe