Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 20:06
Behavioral task
behavioral1
Sample
bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe
Resource
win10v2004-20241007-en
General
-
Target
bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe
-
Size
164KB
-
MD5
4b3b9cdb73b57f6c5669fb7db7d4003a
-
SHA1
df69699c0a5d17b546989c3984546563e8cf0083
-
SHA256
bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da
-
SHA512
c8c74e25156747c6404429c297f5edffe9a80c4fd08f29d802fd45c8bbf3b14d439c04680079336371b90ecb95b147b1af08ece92e23e33a385764f4f6eca409
-
SSDEEP
3072:1mJr72KS8haF1MvY1XSsZrtJbi8rnWRVm5+/evKMVd1437weg:16+BTMv6CcrtJbi8rneV1/uDW3Ee
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2356 bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe 2356 bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe"C:\Users\Admin\AppData\Local\Temp\bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2356