Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
27-09-2024 10:19
Behavioral task
behavioral1
Sample
先登仓库管理系统3.0/安装说明.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
先登仓库管理系统3.0/安装说明.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
先登仓库管理系统3.0/客户端安装/先登仓库管理系统3.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
先登仓库管理系统3.0/客户端安装/先登仓库管理系统3.0.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
先登仓库管理系统3.0/数据库安装/先登物资管理系统(数据库安装)3.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
先登仓库管理系统3.0/数据库安装/先登物资管理系统(数据库安装)3.0.exe
Resource
win10v2004-20240802-en
General
-
Target
先登仓库管理系统3.0/数据库安装/先登物资管理系统(数据库安装)3.0.exe
-
Size
820KB
-
MD5
8415b28920bb507d997dd8e9a5642c23
-
SHA1
b5f4053b5dca7f0c373a90a1a3a624cc359f2a16
-
SHA256
b5f956d574715c980a152b858e582957791785f22d7222ce8a3e4dd4c1393fb3
-
SHA512
3b12a92dece846855ebb886898666d20f4551c7deff2c1218f9f218d757cd4a5a472f9f4f9e19e630c68e0cb614a2c8184435ad685e6a89999032ba0c1424f0d
-
SSDEEP
24576:UXjzj/6Ck+XdDyhxuZMiGHXHpNAOG5aZGWKWNFPP3O:Urdkwd2UMiGHXHDAJaZDK8FPG
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 先登物资管理系统(数据库安装)3.0.exe