Analysis
-
max time kernel
96s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2024 04:39
Behavioral task
behavioral1
Sample
892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exe
Resource
win10v2004-20241007-en
General
-
Target
892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exe
-
Size
403KB
-
MD5
b8de3346a34f0fbe1f04d826a5e47b6e
-
SHA1
8b19d7c56f78ce6ce055eeb1d412b446b59efa19
-
SHA256
892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426
-
SHA512
5125622113c5e4ea9be7390bbef0be5d8bf17b00022f39f50fff86170330acdca37368c338d815156b24af960ab2861efe6bf1281920c156891c9062e35c4f6f
-
SSDEEP
6144:SqJj3bQ/UCg7m1ugavIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FL7:Sql3k/b1ugaUS2zts
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exe