Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/11/2024, 22:56
Behavioral task
behavioral1
Sample
62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe
Resource
win10v2004-20241007-en
General
-
Target
62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe
-
Size
487KB
-
MD5
16b3be4e45df4b40fe9f23652d884390
-
SHA1
4ebca80c00e5c46fe414d8f733c55dcfb6b534a8
-
SHA256
62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59
-
SHA512
e1f5182db779dbfebea7ceaf5980781eaeaa9c4bed9b98e55392d3477c52488ff3dc7375196b3e5fc437cb69b3a0b5258b8492a667dd30c8794da9c56f687b31
-
SSDEEP
12288:vuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZtLA+DYY:S09AfNIEYsunZvZ19Zms3
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1860 62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe"C:\Users\Admin\AppData\Local\Temp\62f2fd47d0a3503d3ff5effe1bfc868624525af15e2b002ebc95830db73e5d59.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1860
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144B
MD51dda0a0e2a753cd5b1feceb8970bc340
SHA10c8ecb83b3b810051b8b139ed7f249e0d265bee2
SHA25627be532836688fc7f0c3ee9352dfa29f55041eaae338f9bb7c2499de3f0d5b48
SHA512b7ec790f9e663f30bf6769d4f8f2b1cdd19dd1253c266964baa36b8cb40e5ba3e89af376f6f31b16cde0d11a56e7a3afe8dae5e3a8cb1a3036279ea74b9c13d9