Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
15/09/2024, 06:40
Static task
static1
Behavioral task
behavioral1
Sample
2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe
Resource
win10v2004-20240802-en
General
-
Target
2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe
-
Size
3.1MB
-
MD5
1380ee05c5727850b02efc85d24d6b25
-
SHA1
b6fae86dd759f3f394010f514e72e8fc809d9444
-
SHA256
2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919
-
SHA512
01627b0069663c9579ddf0b93099400e9a538a113c84f71dc650e6f482f03d9151d8e6ef6c2bfa151355b1e4a9273ef7693b0ded4436cbadee7b09dd92f842c8
-
SSDEEP
49152:bQEkwymZQNCjcmthbErfP3sP7vXuOgx7Gf6PS7S8X4RS3N+:bnkXmKNCjcmthbwfP3kub8waRX4E38
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2272 2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe"C:\Users\Admin\AppData\Local\Temp\2c67e64e6a1df659ae3c7593a6fc5a3356f1eae28b1c837b364b76b36c4fe919.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2272