Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
28-09-2024 19:14
Behavioral task
behavioral1
Sample
7d3a3c5b0c686a4524da451da088b4f4af551e02cbc5fcf29876df6f2cc412e9.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
60 seconds
General
-
Target
7d3a3c5b0c686a4524da451da088b4f4af551e02cbc5fcf29876df6f2cc412e9.exe
-
Size
28KB
-
MD5
654f3bbda5153ca4ddbbf349b34681d6
-
SHA1
e42bee18ce82e2f769327d5d79645c6d610a051d
-
SHA256
7d3a3c5b0c686a4524da451da088b4f4af551e02cbc5fcf29876df6f2cc412e9
-
SHA512
00e5e1a2343c72fc1e861e46230dff5a3af0aedabdcd240410e7cc7853fd9a721c93dde0fbdc392f0487af2f05df88c8097e9fb5f2e0d066f6db82833047792d
-
SSDEEP
768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBFoUdOiJfoUdOiJWo5oJbGMUpybTKn:CTW7JJZENTBDTMUr
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2084-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral1/memory/2084-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7d3a3c5b0c686a4524da451da088b4f4af551e02cbc5fcf29876df6f2cc412e9.exe