Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20-11-2024 11:47
Behavioral task
behavioral1
Sample
2935833ec6d1b0742196be72eddd08f0b847233e9cf404b143ea922d4ba9b9f0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2935833ec6d1b0742196be72eddd08f0b847233e9cf404b143ea922d4ba9b9f0.exe
Resource
win10v2004-20241007-en
General
-
Target
2935833ec6d1b0742196be72eddd08f0b847233e9cf404b143ea922d4ba9b9f0.exe
-
Size
304KB
-
MD5
69c4ad0ceac7a377e52702a6f5bc8089
-
SHA1
13b082da152121f527d3a8521dc12623ed42ce07
-
SHA256
2935833ec6d1b0742196be72eddd08f0b847233e9cf404b143ea922d4ba9b9f0
-
SHA512
e1c51bfb438611cb334791847d05d7d42a6b4c3c87c64e880ff082358a5554594eae4e3cead3c5b181d09891d102865b087203739c33a2e2d63881fd319cede8
-
SSDEEP
6144:eO0dkDl5i6k4Ft6Afvbt9V0ENK5ZM/TIbpKA8mrx/KDz:eO0dW5i4r6AXjKEKSEpKA8m1/KDz
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
2935833ec6d1b0742196be72eddd08f0b847233e9cf404b143ea922d4ba9b9f0.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2935833ec6d1b0742196be72eddd08f0b847233e9cf404b143ea922d4ba9b9f0.exe