Analysis
- max time kernel
95s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 00:03
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20241010-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target Setup.exe
- Size 523KB
- Sample241110-ab54cavfnf
- SHA256 ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0
- MD5 329acf4d6a5e735c1fd3b3fc6c77d3f3
- SHA1 932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960
- SHA512 1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5
- SSDEEP 12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 32 pastebin.com 33 pastebin.com - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup.exe