Analysis
-
max time kernel
120s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13/09/2024, 05:53
Behavioral task
behavioral1
Sample
52a4b5e8641190593821d313f9f01480N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
52a4b5e8641190593821d313f9f01480N.exe
Resource
win10v2004-20240802-en
General
-
Target
52a4b5e8641190593821d313f9f01480N.exe
-
Size
212KB
-
MD5
52a4b5e8641190593821d313f9f01480
-
SHA1
664ac639b16cd836a5e80e067b7f7d5bcf633e72
-
SHA256
d3117ac6524dc7bd9aabafbc91a1d2768536571d88755a147dfd3687f2d900bc
-
SHA512
b234e391eea045b077f28d754b28cd4ced5e1e31ade0243d209eafbc75e5fb93b46ff9cce2bb0cf10cf083b0f59a091f13ef6a459861e55b4d3511fc114142f2
-
SSDEEP
3072:AyM5pMZ3TRUMf8cXyGeK5+SQv15VQIN3C9ISE0qJiNlUtpEICT:rM5piVVZPeVQISzqJRpC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 52a4b5e8641190593821d313f9f01480N.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe 2784 52a4b5e8641190593821d313f9f01480N.exe