Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18-10-2024 20:24
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.RATX-gen.32303.15212.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.RATX-gen.32303.15212.exe
Resource
win10v2004-20241007-en
General
-
Target
SecuriteInfo.com.Win32.RATX-gen.32303.15212.exe
-
Size
940KB
-
MD5
b36366f4a27987d6de47887b03f29c68
-
SHA1
6f290bd6c132ec5c824558a29bdf75d25ced94e3
-
SHA256
4cc1ab70e6fd0d4441c778d40212c6e3114e14d56da85717214f8498e1c1501b
-
SHA512
a9441175872e88fc49482ef4707fad0e1f15a3ee1f4c74f3a2fafd3744968025d35ca61ed1905239a01df58511985e00708cdae7cb9acae4cca8b51032e02359
-
SSDEEP
24576:q4bDOphvGTO5+L0Un5cOoaPaoWXqEinqg4dNMBlqD9:HD2n+H5cOoUao+vib4rMu
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
SecuriteInfo.com.Win32.RATX-gen.32303.15212.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SecuriteInfo.com.Win32.RATX-gen.32303.15212.exe