Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01/10/2024, 06:20
Static task
static1
Behavioral task
behavioral1
Sample
59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe
Resource
win10v2004-20240802-en
General
-
Target
59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe
-
Size
28KB
-
MD5
fa63443ca60667f0ec33dc6ebd2f7270
-
SHA1
bf3cfe4fa4e98858a76c0c0e800b3cae250dd028
-
SHA256
59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6
-
SHA512
74046c9ca65f16eaf5baeb2f3d7129fb125a775791383955cf6877f52e394f9001a280feca896c53462600ad8db42521c3e370b329eb242cf88056ca8efa4a51
-
SSDEEP
384:GKGPxhPwO7gMBZ6Lyr83jyoUrjGXgD5bTJ/2wXnl33cmpmBEBLLS++e/DHh:UCM2Shm6L
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1856 59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe"C:\Users\Admin\AppData\Local\Temp\59924c5d9b2aecf6bde74c46b985fb0f8bc0ecbf23abd011802f1a3125426ba6N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1856