Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22-11-2024 07:41
Behavioral task
behavioral1
Sample
b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe
Resource
win10v2004-20241007-en
General
-
Target
b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe
-
Size
160KB
-
MD5
0038cdad26d22b89e3403451474cc20e
-
SHA1
c07074537b6329ad99e15c0eaab6e9a80a45b4bc
-
SHA256
b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0
-
SHA512
1c25bf0c98cf2463f0e53d645c3795ee0feff838b80e28f846e68cd0bd0ce83e1e4699097e2d20a19609d75e5f20304e16ea4d7f6583d7400523bd130b90ce41
-
SSDEEP
3072:uBFJvGTlQdT+pkZVoKBHBYoiLwPsOstrK20tUt+R0jHNKWtE:EjTRnoKdSvLwUOstrKmFtKWt
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1884 b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe 1884 b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe"C:\Users\Admin\AppData\Local\Temp\b5a21c4bcd52d6e97eee669cbf6226fd3cb810609403aa3acde4a72845913cb0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1884