Analysis
- max time kernel
93s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
11/11/2024, 04:03
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target Setup.exe
- Size 403KB
- Sample241111-emgmcasgmc
- SHA256 506c2f513d64242fcb20ccff8c26c0ed1755fe9120b984c29ba224b311d635c3
- MD5 d1b2c8ddca2f8dd02e2c132153055084
- SHA1 21c011ac7406eef048c175f5887e4eb885c050d6
- SHA512 ab73df911df41235159341cc8fefed284a3f9720f241b51dfe2db2ac415b3438d5fbbeacfa980a61d402edc64afeda87447ccda49b7d279fba524036e9287594
- SSDEEP 6144:CbUYPg/USg7WFugabIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLfj:CgYI/7FugagS2zO
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 20 pastebin.com 21 pastebin.com - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup.exe