Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
21-11-2024 07:47
Behavioral task
behavioral1
Sample
27b7baf17490431f5be24e0fb9b439fa80dd0b4bb3086457869b29e5a764b3ff.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
27b7baf17490431f5be24e0fb9b439fa80dd0b4bb3086457869b29e5a764b3ff.exe
Resource
win10v2004-20241007-en
General
-
Target
27b7baf17490431f5be24e0fb9b439fa80dd0b4bb3086457869b29e5a764b3ff.exe
-
Size
7.7MB
-
MD5
e6b1e5ac83f6fea7efb13c34d91811e0
-
SHA1
04e59dbacd698574fafd5d5e16f57c9ce11196e9
-
SHA256
27b7baf17490431f5be24e0fb9b439fa80dd0b4bb3086457869b29e5a764b3ff
-
SHA512
230cc5c9ae5b34bd8133da2052fd885eac3d5c7ab156779b111297864d5fa8b4be772223324ca5b3302ba7a4750fa55d17920339b829c5ee9b1c0f3ad2cd5441
-
SSDEEP
196608:0FwRs5R0yJ4WCasjBFt1ge3rR+fjdLzJ:QRZOWx6t1ge8
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
27b7baf17490431f5be24e0fb9b439fa80dd0b4bb3086457869b29e5a764b3ff.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 27b7baf17490431f5be24e0fb9b439fa80dd0b4bb3086457869b29e5a764b3ff.exe