Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
27/09/2024, 20:19
Static task
static1
Behavioral task
behavioral1
Sample
33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe
Resource
win10v2004-20240802-en
General
-
Target
33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe
-
Size
20KB
-
MD5
f8aa2fffdc92e5ca0978d42732128b59
-
SHA1
83f5c72b04f44917abde584dac8288f19f0c6f27
-
SHA256
33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2
-
SHA512
ace6a896723aef956fbf2cdb46eda7dd6aa4f74ef419467fb27b950c2c054fd6881e5ab242c7846b1c5f8a673359025a5d014e6d75a7e069d859ad4a90f501a1
-
SSDEEP
192:mfb5EfFVub2YRLJ5nszWZ0VETCqLRlvOu3rUSCwwK+mtgM:3GiY5MqZGEeor9wJK+YgM
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1992 33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe"C:\Users\Admin\AppData\Local\Temp\33ff5a32686baed7c0c7ae865a7a5cffcee174e57540be42ecfe8689e754c0b2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1992