Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2024 11:55
Behavioral task
behavioral1
Sample
be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe
Resource
win10v2004-20240802-en
General
-
Target
be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe
-
Size
704KB
-
MD5
f2d5b14dc6b03a4fc34edc1f2c4f8e3d
-
SHA1
90591f4dbe8245761ef066202c56d4dd956e86fb
-
SHA256
be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b
-
SHA512
f3bf8ea2691bf582f4ded9a84788bee246ad161132de3560723a5fdcae67f8a8674544c2e7e73248536ef10c5dd42bb2a213b1e2f9dc4a992f3784e203696216
-
SSDEEP
12288:ZKIisPoaPlCWkc0cqsb1sAeWSSi+AGzMSbZ+h:ZKIisPoaPljkc0cqsb1sAeWSS/ZgSdU
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4236 be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe"C:\Users\Admin\AppData\Local\Temp\be7f67782d76ccbde4a81569608f9ff6d4d0f39461f41b6adeea8f62b8eb706b.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4236