Analysis
-
max time kernel
95s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 19:51
Behavioral task
behavioral1
Sample
28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe
Resource
win10v2004-20241007-en
General
-
Target
28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe
-
Size
164KB
-
MD5
c217ddbb3ac58ccd4c273b99901ccb8f
-
SHA1
ad6e078504fd1f41d911e79e35dbafbbd215e5a0
-
SHA256
28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937
-
SHA512
59069a6ebd227dc02c3871704c84a3fcc52b537df5bfa94e14d032212eeac1b60a370ad61f1b7b97ae8bc77c280c0c756b6e4ea28b5987362275282eace46f25
-
SSDEEP
3072:JJsl2j4X3+mLU/MEWjFrSYtTcaNTx8s6+WJk5e:YdfWMEmoYtTcaFx8sJWJ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 552 28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe 552 28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe"C:\Users\Admin\AppData\Local\Temp\28aae91cc21aafe51af460bba52c62af9103e8a8c812fb68f55e81c3800e1937.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:552