Overview
overview
7Static
static
51409817f25...9d.exe
windows7-x64
71409817f25...9d.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDIR/pwgen.dll
windows7-x64
3$PLUGINSDIR/pwgen.dll
windows10-2004-x64
3launch.exe
windows7-x64
3launch.exe
windows10-2004-x64
3wget.exe
windows7-x64
5wget.exe
windows10-2004-x64
5Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05-10-2024 18:54
Behavioral task
behavioral1
Sample
1409817f25c45040cecda9b0b92a9a80dcbd94471bc9146a20086f03ace6869d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1409817f25c45040cecda9b0b92a9a80dcbd94471bc9146a20086f03ace6869d.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/pwgen.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/pwgen.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
launch.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
launch.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
wget.exe
Resource
win7-20240903-en
General
-
Target
launch.exe
-
Size
116KB
-
MD5
a1f0e62cfb5c26060e379bffd7d8e64e
-
SHA1
aa5e4b64ca64179ec52a626b305978a0267fa890
-
SHA256
aeec0c7c423303f58d35f6195b5a2b73bab0c1b5a543e501aa195176ce8ea206
-
SHA512
0ed899da1c5ccdf6d4a8244d68aeb9e5240bf40aa17545a90eb20408beb195c4876535f0e915188c48f82a4eab29dd7dc897b888b63bec6b791317fccdea3649
-
SSDEEP
3072:7f5j85sJf/F2VDjqrakQomuOSqjN+0Td+fzXUUpe:C5s/IKfZmBT4md+fL
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language launch.exe