Analysis
-
max time kernel
136s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
31-10-2024 08:27
Static task
static1
Behavioral task
behavioral1
Sample
13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe
Resource
win10v2004-20241007-en
General
-
Target
13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe
-
Size
376KB
-
MD5
1ee647ac0c362c35bfb46c2f2e9e6048
-
SHA1
e0223b9c7e90d12c70d9396aee539993ef7341ca
-
SHA256
13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f
-
SHA512
8bb7088b128edddc3cf383dbced5cdd67f1894e1cbe5c8e9d75153725f027cf48c3e52a9bf5bd33de3889c6217ce889f09bfebb8c613993712c6c05a7263b595
-
SSDEEP
6144:1BuBvqMBvBnBCBEi9i3SmypsHaDrvY55WKHaigJTB:1BuBJBvBnBCBL9iiDp/jYvTHaigJTB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 964 13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe 964 13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe"C:\Users\Admin\AppData\Local\Temp\13799b8a121e9cba9b27a2560fcfb1321384bb0e63bd6ff95015358c6df02b9f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:964