Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02/10/2024, 08:54
Static task
static1
Behavioral task
behavioral1
Sample
30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe
Resource
win10v2004-20240802-en
General
-
Target
30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe
-
Size
96KB
-
MD5
fc743fd0736ddec2a4a381101911fcd0
-
SHA1
5d2f330e58eed68c5fe234eb66539d596e279aad
-
SHA256
30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7
-
SHA512
f63922cc2bc8384828191618fd99157e1a84d524f1ab0444e84b7c16bfe23aa795c7d7444ef10e5318baec9ce8101479f18373ec4f7a2aa4b46d392bafb24627
-
SSDEEP
1536:O4gYv/SuN6qCjnKpiFZuHXbrjgDEAMm2JgEec1iFZuVCjnKsSuN6d:DmjeiFZuryEA+1iFZuYj
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2872 30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe"C:\Users\Admin\AppData\Local\Temp\30f732f2e24ec9bee48541167f23d4b43e8e2ca97e7912ccb063a644bb7a46e7N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2872