Analysis
-
max time kernel
94s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14/09/2024, 16:48
Static task
static1
Behavioral task
behavioral1
Sample
3adb83ab9946a3cb44709efbd7af33d0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3adb83ab9946a3cb44709efbd7af33d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
3adb83ab9946a3cb44709efbd7af33d0N.exe
-
Size
844KB
-
MD5
3adb83ab9946a3cb44709efbd7af33d0
-
SHA1
19f684478fb6e7d42c4ea0abfb36635201afbff2
-
SHA256
1182e8e8d56f31195a2c89ae80745a44452e80d7e8bf4d709c471db20f7da515
-
SHA512
abd20a4228fc29725d718cf0d7e0e1f8e3ee6e9face8076dc2fc0057a0fd417d0208ce9eea51e24f29e937defb8d8a82db453c032c1f39de6996cffb87915f4e
-
SSDEEP
24576:H6HUxpPqQlk/Sg3DIpGO5e+1eIp+WimSZ:BBqLOBFi
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3adb83ab9946a3cb44709efbd7af33d0N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3556 3adb83ab9946a3cb44709efbd7af33d0N.exe