Analysis
-
max time kernel
94s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2024 18:32
Behavioral task
behavioral1
Sample
474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe
Resource
win10v2004-20240802-en
General
-
Target
474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe
-
Size
236KB
-
MD5
97aa6cd6fe4af1546712873db32a0f32
-
SHA1
bc8960c0b3ca0c92403de2b2bfbcff50ef8d360b
-
SHA256
474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926
-
SHA512
4fe48470d106f232b6fbb5e845c79c8b39f63a228840ca456a6fa9324b95658dcfe59a0d8c97348fd7f46d50212e267ba13dd593c0ac1dd2c55bb0d152123f12
-
SSDEEP
3072:5Tevo6xzu8MzjaXI8j/0YE4bCR4o4OZr4Tv1VjJl/C5O5jj713KGrOyCAtFjUlu:56g2i2/FbCR4o4OA9qs4QCY+u
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4608 474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe"C:\Users\Admin\AppData\Local\Temp\474c497dda2f2669f3d284009d0ae7b87f5ff604d8c7cf933e018beceb214926.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4608