Analysis
-
max time kernel
105s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18-11-2024 18:07
Behavioral task
behavioral1
Sample
2aaaabe533bcc58be505434006b10a8c0fe7bde29f142cbfebeb8e2034b7d0a1N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2aaaabe533bcc58be505434006b10a8c0fe7bde29f142cbfebeb8e2034b7d0a1N.exe
Resource
win10v2004-20241007-en
General
-
Target
2aaaabe533bcc58be505434006b10a8c0fe7bde29f142cbfebeb8e2034b7d0a1N.exe
-
Size
72KB
-
MD5
2f24253cc6db8c7ac4ed27af70a68e10
-
SHA1
6c1008abe856e044ecaf0c1c41091b2e96293e3f
-
SHA256
2aaaabe533bcc58be505434006b10a8c0fe7bde29f142cbfebeb8e2034b7d0a1
-
SHA512
bb0d6daba305d4de54264dd8cc23afe75bbb6048efd4c8adf8ed0d4e7670b0b7cfadf382085eca1a580229e27466cc4d37beeace6d1c6c0483de94a93130c099
-
SSDEEP
1536:IO+eo2jqUXdc++jODFQZabjRzXslzcbRfPRFMb+KR0Nc8QsJq39:t+F0FzFMijRDseRfPRFe0Nc8QsC9
Malware Config
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
2aaaabe533bcc58be505434006b10a8c0fe7bde29f142cbfebeb8e2034b7d0a1N.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2aaaabe533bcc58be505434006b10a8c0fe7bde29f142cbfebeb8e2034b7d0a1N.exe