Analysis
-
max time kernel
140s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14-10-2024 11:22
Static task
static1
Behavioral task
behavioral1
Sample
eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe
Resource
win10v2004-20241007-en
General
-
Target
eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe
-
Size
4.8MB
-
MD5
5f3b5c3741d3fd860ff13d1cbbf6e829
-
SHA1
7b459b72659c11458d26d1c0dc43da819dc3ee8e
-
SHA256
eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42
-
SHA512
e64b71c1346c96c2b48674a2f57f472eb0923ca2ff815fef15ef819c88643937a2a3575e74af681baf0effcd9da9ffd8b4ea05a9c7cf4e04198a3e05e0063e0d
-
SSDEEP
98304:paef88hftahxwIUY9WUEyJMQB9VMob9fvx+VjrnLi6zxA5EH+tjOp:pxf8Yf8xVWtyHVxblZUHnLfXH+W
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1496 eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe 1496 eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe"C:\Users\Admin\AppData\Local\Temp\eec4fae67388b579230ce343eada7ea79d4de830c8142be97af146b8a8ff1a42.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1496