Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05/10/2024, 07:53
Static task
static1
Behavioral task
behavioral1
Sample
d9f0dc1e7376db9ceb63e124c75e401aabbebc458b408780af59876b8f84e831N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d9f0dc1e7376db9ceb63e124c75e401aabbebc458b408780af59876b8f84e831N.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$0/basicscan.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$0/basicscan.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
General
-
Target
d9f0dc1e7376db9ceb63e124c75e401aabbebc458b408780af59876b8f84e831N.exe
-
Size
552KB
-
MD5
feeca2fca7eec9ccbb6ecabc17dde420
-
SHA1
42b5aab77b323020272aef52736e9608c58f0ef9
-
SHA256
d9f0dc1e7376db9ceb63e124c75e401aabbebc458b408780af59876b8f84e831
-
SHA512
0d3bea4530616f62913b79221a179a59b94c2b55077af8c0a56e791cb9d665a2e1fad84a897f72d8f31bc25ea2ace0c3aaa9bc82dfebf0d92ed73c0df0d28ea6
-
SSDEEP
12288:pCQNAPylrL9iQ4XkNlPPqvlDaxM12JKdLu3iMz1HiMA:pCQNKyqQ+k/PPKNaxM8JxPiH
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d9f0dc1e7376db9ceb63e124c75e401aabbebc458b408780af59876b8f84e831N.exe