Analysis
-
max time kernel
93s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 20:06
Behavioral task
behavioral1
Sample
30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe
Resource
win10v2004-20241007-en
General
-
Target
30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe
-
Size
164KB
-
MD5
ff73d4827ac904327e6754c3e8d683cb
-
SHA1
f7407575b1e9b6996f7e238b4e42aa62122b0f15
-
SHA256
30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d
-
SHA512
c4a6de428dfcb0002d624e6d6646598a6713a9ff9f9fd4edc88edb94b15336334b52d8d7f70d39d84fbb1c492e410f544ee61472f5ced4f0e206dc57c82f8d9a
-
SSDEEP
3072:auJUjjT0C2iMp883Mqj+iSmk9Fjgu4lcLywHOwG6gXpvxWu:aFOP8SMqSNmk95gympwtYvxW
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3820 30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe 3820 30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe"C:\Users\Admin\AppData\Local\Temp\30819ed42893957f68a2272b1e4486a610d8d3afeaba3c90a1e2997d3ae6414d.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3820