Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30/09/2024, 13:30
Static task
static1
Behavioral task
behavioral1
Sample
2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe
Resource
win10v2004-20240802-en
General
-
Target
2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe
-
Size
326KB
-
MD5
d6f5ca5da79a7eb267670cc0e6f5d590
-
SHA1
6d62f339e2bb9b107b0309663d30e4e4647e4b5d
-
SHA256
2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd
-
SHA512
f0b1298f64aee6f683b5d985c1fcb8a5f2ac4d15a1e0a7c372f991c1a4e6b4152425506ad13cc11b04696ed9ff43e16d3419c2aced2dab4c2c80207834a2caa3
-
SSDEEP
6144:ntH/xNLaAOvIBd7lAAxWS1elIoSN6WX+t45q3niV0:ntH5NLaAdDhAAEIFcWX+t4o3iV0
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2660 2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe 2660 2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe"C:\Users\Admin\AppData\Local\Temp\2a3da413f9f0554148469ea715f2776ab40e86925fb68cc6279ffc00f4f410dd.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2660