Analysis
-
max time kernel
96s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 20:12
Behavioral task
behavioral1
Sample
87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe
Resource
win10v2004-20241007-en
General
-
Target
87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe
-
Size
164KB
-
MD5
bd1cf36597a62d4190beeb3665fa9b62
-
SHA1
4d6c1e949e671573ba36623e40d3fcc07c6714ef
-
SHA256
87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1
-
SHA512
b0812ecf49ec6e438b50922d7173b752542a641ecdb2f020b64c06527efb3c687c18548fa4471a6fa8703c026e6f83238542697a5cb628c7c2a35b7ef305c284
-
SSDEEP
3072:hpJr+jnYfH5153zM2XJq3xg4pb1tzTQJ0HN8znU7+pxSnFln4:hHddjM25Yxd1tzTQJ0t8nUapgnP4
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4688 87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe 4688 87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe"C:\Users\Admin\AppData\Local\Temp\87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4688