Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19/11/2024, 11:05
Static task
static1
Behavioral task
behavioral1
Sample
e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe
Resource
win10v2004-20241007-en
General
-
Target
e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe
-
Size
2.2MB
-
MD5
49a48c42ade45108cda7609185d9ac0c
-
SHA1
9ebe8aebfa9891ae8709ad6cb0da43518b05c27b
-
SHA256
e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27
-
SHA512
37d4b0065ba35a5267ebd7f106fe5ecf5ec14a60a61df8ca3a36edac7b2b2d314fcc805908877ebd20d3f7b4bed5b34098e0139233ab65103ed9b5d9538b3cce
-
SSDEEP
24576:BqGW01sghkVPf6yuRyYCE0nMeX1DdGWle/VtuVptI:BqGW0mVERWE0MeXhdGsUt6ptI
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3980 e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe 3980 e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe"C:\Users\Admin\AppData\Local\Temp\e2540b8d270904c2c773ca85e1d75fde3b076a003e1a848e80dbea44d51cba27.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3980