Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/09/2024, 10:19
Static task
static1
Behavioral task
behavioral1
Sample
8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe
Resource
win10v2004-20240802-en
General
-
Target
8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe
-
Size
668KB
-
MD5
7cb51fa1b50b2e92fb4d4cc48af18b82
-
SHA1
c7ffc506f8eed8bbd8a3ab987c887d82f7fe24f5
-
SHA256
8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361
-
SHA512
334edd7ac5fd4ee5a7d16f4535a6af4f3054e5c743ae8557eefab3f4c5c954cc0b61d4ab8a09de45ee7baf800932b1249e320ad5bfb3e25806a32ee14c6c8352
-
SSDEEP
6144:zWW4jf2LM/46Zm8Tho8AMwh8tD+UzpqhIuVuy220ePdI0s4fye4+EQjDy7Du//W2:iWPLuTm8ThZQHSE4yl0QKEEQS76//n
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4176 8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe 4176 8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe"C:\Users\Admin\AppData\Local\Temp\8e69bee7271941b259bb3e6ace3548a3e3ad201f2f877c87450fb6a6d71d8361.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4176