Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
18-09-2024 06:42
Static task
static1
Behavioral task
behavioral1
Sample
List of Pending payments.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
List of Pending payments.exe
Resource
win10v2004-20240802-en
General
-
Target
List of Pending payments.exe
-
Size
1.1MB
-
MD5
07c0b1ad92d9f44df35eb1bdcc30ffc4
-
SHA1
8bccb3ee9e887596a16f1c95c1eac6342829990e
-
SHA256
88d3cc80c59d933c2e6305771e60a4ed5171b0b63431aee31bba315e43625669
-
SHA512
325b1e6eee1adec315a0d2b3b6389af8d66867d9c751fa01586ac78e4d305f1e89c2ecfef3e6f91d882265b0124fd1bb35d59276b4d85b7d462b92e01be0d1e5
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1iaC+NdYz3yrbZrl6w3QDaXsusp+piAOhuv:7JZoQrbTFZY1iaC+NdYuQDaXsGirY
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language List of Pending payments.exe