Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
10/10/2024, 07:09
Static task
static1
Behavioral task
behavioral1
Sample
4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe
Resource
win10v2004-20241007-en
General
-
Target
4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe
-
Size
3.9MB
-
MD5
d66ec0748caaf29fda4015010573a5c8
-
SHA1
d451b7772150f060d2817a515b7f339d97787ec3
-
SHA256
4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d
-
SHA512
f3537a95b671d20ac4f58715cfc7a8b3b42688435f73c2ba85c3f7e344e4427500b7af14688b0cfaedb7c44043e9997a279575c5be341ea5a2ba7d04d2a14d39
-
SSDEEP
98304:67k43ixkTWJviVknZEEzyUxT0MR+zA0jQy5:p+WRfQMR+c0jQ2
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2356 4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe 2356 4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe"C:\Users\Admin\AppData\Local\Temp\4f4411fe3698fa30f3fa7b242e68e11ceaeb7184ff1edb808f5b639488708c9d.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2356