Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
18-09-2024 21:25
Behavioral task
behavioral1
Sample
83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe
Resource
win10v2004-20240802-en
General
-
Target
83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe
-
Size
3.6MB
-
MD5
b54f5787a2e64bd677f9fb1e24b8d0a4
-
SHA1
ea520bf60f44f34b73adb3857c684e925d128eb6
-
SHA256
83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7
-
SHA512
edf161b93a4fc8a3887a883cb0ab00aa6f1612ff4aa9a365aa25037e4ed51e293151e58973a6d596b0c4ca4518f03ab83d80d9dfde06ed5a0822753c827df239
-
SSDEEP
98304:3GqDm8/rypVIGPhJEuL2oNOF3076h4nNKvV1+h32fHHF4VA9:3G2m0y3IGEu743iLKvVBHF4A
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2476 83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe 2476 83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe"C:\Users\Admin\AppData\Local\Temp\83e30edc246a91cacc0300beb755feff902519ab947c23e3dcea21f775aeb5e7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2476