Analysis
-
max time kernel
20s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
09-09-2024 08:18
General
-
Target
3_4.exe
-
Size
59KB
-
MD5
1efeb85c8ec2c07dc0517ccca7e8d743
-
SHA1
5563e4c2987eda056b3f74716c00d3014b9306bc
-
SHA256
036e4f452041f9d573f851d48d92092060107d9ea32e0c532849d61a598b8a71
-
SHA512
ece53b859870a72dbbc4e6cfe408ade28d9cc86b22c12176d6e2c270b7110d1ef2bc73b5fee640f88af17f243ab87bc2a57864081aae2f87b8b47b1b46238fb2
-
SSDEEP
768:ZGCOlsTLHcg46+MVjENmeB0hX66PeFo+3mkTr27gPQ1LqgovbBbcrFXEb/VN8CtT:Qqs7ZEey1A34L1LqXb0FXEZt4WY/KCo
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1952-0-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1952-1-0x0000000000400000-0x0000000000467000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3_4.exe