Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
10/10/2024, 02:08
Static task
static1
Behavioral task
behavioral1
Sample
d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe
Resource
win10v2004-20241007-en
General
-
Target
d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe
-
Size
55KB
-
MD5
c54fd8c230bfd47994ebaf4f10274a7f
-
SHA1
5538ee7b3f00593092b06560ae00fc2892266866
-
SHA256
d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc
-
SHA512
77583b16a1caba65a8a233511749a103895e47271a1fc1e56e142d809c2f02ba8d07a60c0ad1d797316650de1453dca9178a75edf4cbdda127497e1f5a362207
-
SSDEEP
1536:zdORe40Vl7IPrPsDnUR405PsDn7Is8jcdel3zXEZFv3:zsol4rJH52exzq
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2344 d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe"C:\Users\Admin\AppData\Local\Temp\d81566aa0323a62a4a26919c929938f9b46936661a5b4fe3ff2f68afab7a2fdc.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2344