Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2024, 12:48
Static task
static1
Behavioral task
behavioral1
Sample
ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe
Resource
win10v2004-20241007-en
General
-
Target
ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe
-
Size
1.5MB
-
MD5
f22941ffb99db2aefbc6d21c4253f7c0
-
SHA1
8480106cac549df3ba469b8e7565e004b0fb8c23
-
SHA256
ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204
-
SHA512
2b31637c45f692f73255629f6869fa7b5826dbc4f0fcc2e6c10fa11edbcb06352d449d9d3ce9c5bb61ed00c561752531bd1f45486dbcce2436b0592c9243508e
-
SSDEEP
24576:2NI19absFAgf50fN97GZRyUUVCt6XNp7MqkgPrEz1pME2fYo5u4ISAzTmjSHEYK:2LsOgB0fN9m/Ktd+If55utVTdkYK
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3144 ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe 3144 ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe"C:\Users\Admin\AppData\Local\Temp\ef213a82a611b3ae77b8b2ecbb9318514ca5d9ab68ac8ef1ce67baaffd416204N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3144