Analysis
-
max time kernel
95s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 19:59
Behavioral task
behavioral1
Sample
bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe
Resource
win10v2004-20241007-en
General
-
Target
bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe
-
Size
164KB
-
MD5
dc26f912ddfbd375c3ab80c3be5fd50f
-
SHA1
7f26154d452f0bb2ed065481ae3a23d1aa98173e
-
SHA256
bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6
-
SHA512
034504f5fad9b32f021265ecbfa87861eb18957a930f28a08a4fc8a50c286227d30c8b4343769137c0f31f309c3b65d92e363713b4488a2e227d57caef1b08ae
-
SSDEEP
3072:q5pGMu2UDZFyBESMfTtSg0tw9rWJzEcYC3Jua3OOOpgNHbYWYJ:qiT0XMfpj0tw9rW9Ei5j3d9Yn
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2228 bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe 2228 bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe"C:\Users\Admin\AppData\Local\Temp\bcd367e23b9e5f2aab667e9298ce649a7922c6fba753253f295cf3d2bfd677a6.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2228