Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2024 10:45
Static task
static1
Behavioral task
behavioral1
Sample
f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe
Resource
win10v2004-20241007-en
General
-
Target
f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe
-
Size
1.0MB
-
MD5
41d7ed7687f2a718a54710807d807430
-
SHA1
bb9b0199dacdd1b39fa39f88596c0620533a1679
-
SHA256
f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa
-
SHA512
e4c44c10d709fd7aef7fb91e7e6155a222aabd58120a4071e8c00388d9d1a3bb24b20f16e454ae96f6e1d31f9b57e1475066bd63009cc8f1972d042fd82a0564
-
SSDEEP
24576:bl3hpdoHTTL6o9+p4Io/LrDWtSyAKMb4rsx/Pz:b8XZDLuSymUa3z
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2356 f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe 2356 f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe"C:\Users\Admin\AppData\Local\Temp\f31946daf0926f3dbb42b267f49d1edaaa194a2b88ffe90f1d73e2e5707e98aa.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2356