Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21-11-2024 07:40
Static task
static1
Behavioral task
behavioral1
Sample
d7867379dd446dcf1838b4ac59ba9c299a9d901866beb0c17aabcba6ab4a0ecb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d7867379dd446dcf1838b4ac59ba9c299a9d901866beb0c17aabcba6ab4a0ecb.exe
Resource
win10v2004-20241007-en
General
-
Target
d7867379dd446dcf1838b4ac59ba9c299a9d901866beb0c17aabcba6ab4a0ecb.exe
-
Size
104KB
-
MD5
070d14fee76e8640ebdb96b7305a0c7b
-
SHA1
ee9c2109be1843cdaa2fd2dfd066073d0bd9aa92
-
SHA256
d7867379dd446dcf1838b4ac59ba9c299a9d901866beb0c17aabcba6ab4a0ecb
-
SHA512
5c7bfa555a1e21c718aa1d76204afeac6d47234071db2cd64ced2e9f1daceb888da88dfdb5f0187b0cf5a275130105e59ac65a48ab1789ae2a6af9f2598f9954
-
SSDEEP
3072:gZegVckL3vI+eOUE/LWQTIITheOpYJ3u7r:gZbL3vTX6QkUMVJ3u7r
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
d7867379dd446dcf1838b4ac59ba9c299a9d901866beb0c17aabcba6ab4a0ecb.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d7867379dd446dcf1838b4ac59ba9c299a9d901866beb0c17aabcba6ab4a0ecb.exe