Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-10-2024 17:23
Static task
static1
Behavioral task
behavioral1
Sample
a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe
Resource
win10v2004-20241007-en
General
-
Target
a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe
-
Size
3.1MB
-
MD5
aa591cc4e497fd75b1dfbc8b2d23f329
-
SHA1
0e252cc11310af4ddbff02fa6ac0ab2a6d77911d
-
SHA256
a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa
-
SHA512
c227d8663f4a24333ed2fec01a248aa43156990be8c4def2580fc5590a54cee50cfcf5da4aaed651de5cc6b2e8d4d67fb4966aac9c4e5cbbd0395b2b1fa76714
-
SSDEEP
49152:9KAT2jo658l/lst3a3z6Ty0L6OCiR6GZ:Cjo3cVy0R
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2976 a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe"C:\Users\Admin\AppData\Local\Temp\a753843a286774af2eaae503743dee6628533cb19942c61f29cf20ab082032fa.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2976