Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19-09-2024 07:07
Static task
static1
Behavioral task
behavioral1
Sample
23269873/client/Project1.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
23269873/client/Project1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
23269873/client/client1.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
23269873/client/client1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
23269873/server/server1.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
23269873/server/server1.exe
Resource
win10v2004-20240802-en
General
-
Target
23269873/client/client1.exe
-
Size
1.3MB
-
MD5
d81afcedddbd7b61f1c404d1e9bb1ec2
-
SHA1
d55c68168ff6f3399af695aa6b49972e75969ff3
-
SHA256
b4a545e62bd67fd4a2670afbe43680251842faa426862c526dd3dfdd5032c606
-
SHA512
67124892d91dc7b0d305b1c8d0e493fcc0c1ac78d1186f4fdc6234e5c69c72aae6abcc81e3ac639dab2ba52ea04394604cbd8c9ccdb7140b5c776f266b282606
-
SSDEEP
24576:I+BmYi3kiV5zr15Xn1wV4GkA0YkgdYF0AQS7HAHDAQS7HAH:I7xXIPQ57HAHy7HAH
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language client1.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main client1.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2740 client1.exe 2740 client1.exe