Analysis
- max time kernel
110s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 03:46
Behavioral task
behavioral1
Sample
57e13147151568f481886b53a379df71df1d74b5dee08ac0eec91de6d965050eN.exe
Resource
win7-20241010-en
2 signatures
120 seconds
General
- Target 57e13147151568f481886b53a379df71df1d74b5dee08ac0eec91de6d965050eN.exe
- Size 7.9MB
- Sample241110-ebwbcssjhp
- SHA256 57e13147151568f481886b53a379df71df1d74b5dee08ac0eec91de6d965050e
- MD5 987d0db40ce8cf0e08666155d7708ac0
- SHA1 ab5a239f5a1b211d0d6307d3cd4c2a17d7e17850
- SHA512 611d27783c08f207374cf86bccece9fd528b36f014cb4d4ee6f3fa2a5017c5096d8f8b997bdd5ee868dc374f972ae9237f3c8c59c1d307fd0fea4a58355770e2
- SSDEEP 196608:gZZr6PpsXRKKMTq+jSREylPtWZ7Gncs1sLI8C1uCCmeoXzN05l0Z69q5B:gZB6xsQKJ++R9lPI7G51sLI8CPCmeol/
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4772-0-0x0000000000400000-0x0000000000749000-memory.dmp upx behavioral2/memory/4772-12-0x0000000000400000-0x0000000000749000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 57e13147151568f481886b53a379df71df1d74b5dee08ac0eec91de6d965050eN.exe