Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 20:08
Behavioral task
behavioral1
Sample
c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe
Resource
win10v2004-20241007-en
General
-
Target
c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe
-
Size
168KB
-
MD5
2b64cefb31bc2335213e325b60187b41
-
SHA1
04279da5be103a2d3592d82b7a1f1d7aedd56773
-
SHA256
c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166
-
SHA512
780348d4e618a7bac1550810be697eb195af8e3a94151042fbab3556f794789fd3f2960b9e60f9168178ea144705e61e72dbd65999744c959fb0effb7e984f87
-
SSDEEP
3072:46ptQ2m/WQUZu9MBbctlGCh+m9H4DcSKs0cZMHwa9WLhX93UVNP+:40t5GMBYbFh+m9YDRX0cZgwa9WLhX93
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1960 c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe 1960 c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe"C:\Users\Admin\AppData\Local\Temp\c0193d60e9b52fd036892f6d6cac0b0a7500babe7f060876a0893fe20538a166.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1960