Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19-09-2024 05:23
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.AutoIt.AQ.gen.Eldorado.22424.9102.exe
Resource
win7-20240708-en
General
-
Target
SecuriteInfo.com.W32.AutoIt.AQ.gen.Eldorado.22424.9102.exe
-
Size
1.1MB
-
MD5
853411ef6f70669a8333b503c2709c15
-
SHA1
da98ef73c0f864862a93482ce19f86ceff91ac1b
-
SHA256
6a1ff3a9d7b6cbba06c46cbe04433eacbffb7f62d20bdcb38ad7d50fc6d6fab6
-
SHA512
e9863dfe2b40f8284843c725161b5c0f63fd3559a4fe69398deb3e4d1a87e9fa9d121e63ea1787151d703ee1f87fb202b8fd3fd5ae68e70556240a676033b4ea
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1iaCErHiF0WHKgUytHxfMuxANhAQpAu:7JZoQrbTFZY1iaCyHq0eUoHRxAXAu
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SecuriteInfo.com.W32.AutoIt.AQ.gen.Eldorado.22424.9102.exe