471f3fb1a953fab38be3081eb835574694bc72b94f239edc400d1ce3d7a8ecb0

Analysis

max time kernel
1185s
max time network
1187s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 02:43

Target

7965f6adf3261e8820fe583e94dcb2d17dc665efa0442743e47d27c989fcb05f_not_packed_maybe_useless.exe
Size

54KB
MD5

e0c70373ea59baa4422771dde804a21c
SHA1

d9708f709a0e7ad070ee34b4065437e400e5bdd9
SHA256

7965f6adf3261e8820fe583e94dcb2d17dc665efa0442743e47d27c989fcb05f
SHA512

c9a6b94d091a48d1a294953226fca00089dbf266f81fa60481f9ca468f7c3e9a2460bdd384b070dd6ae8bb778fb0737e196a1870e6f550645b9192f78e9763fa
SSDEEP

768:zchho/bbYYwktIZwTUtv3h12jG6hdYWnXAjpWTbBbIKP077hPIxPaq77ti:wjoDMYwEINR8j/Yu2pqOd77hPl

Score

7^/10

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

System Information Discovery

Processes:

7965f6adf3261e8820fe583e94dcb2d17dc665efa0442743e47d27c989fcb05f_not_packed_maybe_useless.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Control Panel\International\Geo\Nation	7965f6adf3261e8820fe583e94dcb2d17dc665efa0442743e47d27c989fcb05f_not_packed_maybe_useless.exe

C:\Users\Admin\AppData\Local\Temp\7965f6adf3261e8820fe583e94dcb2d17dc665efa0442743e47d27c989fcb05f_not_packed_maybe_useless.exe
"C:\Users\Admin\AppData\Local\Temp\7965f6adf3261e8820fe583e94dcb2d17dc665efa0442743e47d27c989fcb05f_not_packed_maybe_useless.exe"
1⤵
- Checks computer location settings
PID:1796

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\ProgramData\zquqxdlulvapuzm

Filesize
52B

MD5
70704ed2ae76989e1e310dc9c4d7ad73

SHA1
176e8d88606d9975b5257847741beb31a64ff06e

SHA256
e1ba19fa045398f0a9100a932a7bc575e2a619edc8fa4556f171aef57663abc3

SHA512
ea84e63dfae279eb10e8edb892d1ea531d3f456ddf4156ea23539767b2ad07e633449ce42836a759cf1951afff22e670a7b3359ca9dc6cd4d2fa390a927eec17

Download Submit