Analysis
-
max time kernel
137s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18/10/2024, 11:08
Static task
static1
Behavioral task
behavioral1
Sample
2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe
Resource
win10v2004-20241007-en
General
-
Target
2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe
-
Size
10.3MB
-
MD5
f22cceeeba54f88ad53fc2b623303b4c
-
SHA1
e7fd674a3564c5ff4d5f6bc18006ec4a7986e574
-
SHA256
2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9
-
SHA512
2ba056db86aa9bd8b1c3dad5c1a4b7878b983dbf1400bb1651b429c546e532d59b485a4b7036a09877be8ee5cc1767181841a9f7463bcf8af645162361379f50
-
SSDEEP
196608:dXHSVf+6b9oDdh0qTRxa8z1sULDSe9a+5crvT9YqS4lU4I4:dXHuf+6poDjBTRxa8psYSUa+arvSP0z
Malware Config
Signatures
-
Downloads MZ/PE file
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3800 2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe"C:\Users\Admin\AppData\Local\Temp\2b81b4b7f754296cb3a110fcec66e46303af49f7e81ef7f2873121799014b9a9.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3800
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD51efe66e4ac8c2c06b5cf619ce5632809
SHA1ef5ccbbbcc6c9176d69e1f952ad1df2b811198e4
SHA256da0d0843dbdbc4879306e1646f9fcbc2a7c83b48d252f486e8d64cf4fee243b0
SHA5124f5a7883f6430e1bec1d240263ea310f833b5a9ca452af2e211f5d6586e872077d7073b73b2401e29ccd94c49b12351365d6a68c131f36bcf5a31dfa5bcb9b87
-
Filesize
38B
MD594f2cf6ce8902d9412968256b549cbec
SHA1473021cf6eaf75743a08b63827274e707815cb4d
SHA256f7f845d5f94d3152bb08e3609b5d077812affc9444a076a10c89bdf4b80331ab
SHA512c489fb1d8c28a0c9271677dae24199e00ef2519f31e1f904c731a7030d53fca95637c64c0e379e4e27d56314cd9641f0cc6ca0583fd77992293ec6b7f37e3ed9