Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12/09/2024, 16:58
Static task
static1
Behavioral task
behavioral1
Sample
65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe
Resource
win10v2004-20240802-en
General
-
Target
65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe
-
Size
15KB
-
MD5
0fc294bfe33434c678a70086c67e0416
-
SHA1
f589e21e86a642fbb0f3aceb01b48d06f12a64de
-
SHA256
65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8
-
SHA512
27963688e070a6dddf953be22d9ea6e2a876e21cdc8b773e7c9b6bec1e6d36ae1b892117585a73f339c5debb08c5036d1c0a10ef6e88e06b409a6aa6da062edb
-
SSDEEP
192:n7Mu7Wh5leYc2AmSSJYGGbnvHcKBz2Uo2BcBF276YM+S/KKsDsfdEA:7MHeKKbnvHFzNWBFSisDsfdEA
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2088 65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe"C:\Users\Admin\AppData\Local\Temp\65cc34d4216b5d3fe7f4a7580b1c0f08c3c0a20f4ab3053ee07b045860bcb0c8.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2088