Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25-09-2024 02:47
Static task
static1
Behavioral task
behavioral1
Sample
257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe
Resource
win10v2004-20240802-en
General
-
Target
257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe
-
Size
529KB
-
MD5
245350f3cf0b9a3253021d70a6a34a70
-
SHA1
eb2e28f87de0fb61b7e27fdab870b558af5562cc
-
SHA256
257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0b
-
SHA512
05f5a46dcb9b66e8ce010ea94ee20d45676190b5fa1c6dc0ae93af880eea284634349cee4b43802b9a648d4a338afc8e0d10018b5f26ffca710fe86e48adf2b9
-
SSDEEP
12288:9079tBCjP3u+tTlAMebkLMNHjQdlwO2u8rc/XvrqQOo:9071EBtTFMnrYdOo
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2368 257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe 2368 257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe"C:\Users\Admin\AppData\Local\Temp\257ca14ae81855605c594e995b06b570a5da0a27b17bc7b1158dcc3c03515e0bN.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2368