Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17-09-2024 05:54
Static task
static1
Behavioral task
behavioral1
Sample
oc_202486545346576879879856879876756875246.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
oc_202486545346576879879856879876756875246.exe
Resource
win10v2004-20240802-en
General
-
Target
oc_202486545346576879879856879876756875246.exe
-
Size
1.1MB
-
MD5
ef3b33eda19bdf6cc936b97f7e582f1d
-
SHA1
2f67db5fb6220c97ade8c9a016e0553af766efe3
-
SHA256
6d7383506176b2d66904efea5dfee58a70ad683ee01d9bf6a49066a92ab81cf6
-
SHA512
975c729679891c2552d9f444a6f68f80ca122c6476599efe1b257791695647577c7b003146ef5dd457ead393d5da42b74949a6aadb514d24847d5e4bce1924e3
-
SSDEEP
24576:0RmJkcoQricOIQxiZY1iaae3Ut4xK9+UfLWYG6uwiQizOVEC0ZL:RJZoQrbTFZY1iaaYQ409XmZwnizOVa
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language oc_202486545346576879879856879876756875246.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2400 oc_202486545346576879879856879876756875246.exe 2400 oc_202486545346576879879856879876756875246.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2400 oc_202486545346576879879856879876756875246.exe 2400 oc_202486545346576879879856879876756875246.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\oc_202486545346576879879856879876756875246.exe"C:\Users\Admin\AppData\Local\Temp\oc_202486545346576879879856879876756875246.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2400