Analysis
-
max time kernel
95s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 20:32
Behavioral task
behavioral1
Sample
0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe
Resource
win10v2004-20241007-en
General
-
Target
0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe
-
Size
168KB
-
MD5
5130f75b4ec280259770aaf6d47cdb69
-
SHA1
841c161ddabdf6f51c61e7da7de349257a820bba
-
SHA256
0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac
-
SHA512
c873bab7866a0001ce3728e969ee6711e05e2098287472504e3d1b570c40c343ae102f2336b0809e4ff3e5b7dab77f18ac41bf36733cef073fc34c3261723480
-
SSDEEP
3072:SvJzqjdWswYi2Z8enC4MCvjtrXHNl8UBNHTbFlwe4yXnVB:SB6xNjMC7d3Nl8UDn/FnV
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2112 0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe 2112 0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe"C:\Users\Admin\AppData\Local\Temp\0492146822fb02bd1445d4313a6261e7b3cef2afc99afe27fbd1a95f08962dac.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2112