Analysis
-
max time kernel
147s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02/11/2024, 08:32
Behavioral task
behavioral1
Sample
17305362703b0d9f8acbd8da71dab18df4d831508ea3277bd852c15b099d053d13a963d950744.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17305362703b0d9f8acbd8da71dab18df4d831508ea3277bd852c15b099d053d13a963d950744.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
17305362703b0d9f8acbd8da71dab18df4d831508ea3277bd852c15b099d053d13a963d950744.dat-decoded.exe
-
Size
483KB
-
MD5
9633e8eaebea9d1f9640ce6beffb2ffc
-
SHA1
e465b4b2554ff1f0c1ad60d3ae6dcc3ecaf8fcc7
-
SHA256
0f07f7b65b4b5209646c6972d6d92d6a162d33f38cb7ceb0280598da1085670e
-
SHA512
aa687a2d0ed8c9ec990d4dea96a83f0225a6c7c09d6f7921f5455142c990469dca45b9080496f632e87e3693027819fa0694b1f98684bce8d375865cc39ce15d
-
SSDEEP
6144:4Tz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZXAXkcr5T4:4TlrYw1RUh3NFn+N5WfIQIjbs/ZXeT4
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 17305362703b0d9f8acbd8da71dab18df4d831508ea3277bd852c15b099d053d13a963d950744.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17305362703b0d9f8acbd8da71dab18df4d831508ea3277bd852c15b099d053d13a963d950744.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\17305362703b0d9f8acbd8da71dab18df4d831508ea3277bd852c15b099d053d13a963d950744.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1884