Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01-10-2024 08:52
Behavioral task
behavioral1
Sample
a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfaN.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
120 seconds
General
-
Target
a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfaN.exe
-
Size
43KB
-
MD5
31c6a1bc70b3f1d62cf1a99e0ae60280
-
SHA1
a62668518cf13f8702dae6b8a70f52a4d45bb315
-
SHA256
a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfa
-
SHA512
9e5381e0d3270aa45198c68f9fab75432f8561180bc16f3021dc8d0af38898681ed203bf20074bfc1bd0519678239828f229c068217284c9e63b051e6d5dfcee
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ZJ3Rl2gwwk5UF:CTW7JJ7TzJswk5UF
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1984-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral1/memory/1984-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfaN.exe