Analysis
-
max time kernel
147s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
23-11-2024 06:02
Behavioral task
behavioral1
Sample
17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe
-
Size
483KB
-
MD5
0a5ef4ce865711c55bbd9e3ba61bcd4f
-
SHA1
af23d89a402faaf366a0374a24dcd5844b386d62
-
SHA256
fc7beeae6b795561f216733b82611c8db1643cc883ded6fbca9c447c7a985358
-
SHA512
f79a23f44518c1fb363264fa5bde787ba44d80bff1af7464f2f515ef9b45aa4774f13ae4dc5440fa15918db3c9224183a1b12d2731059dec1f2b85640f0f8030
-
SSDEEP
12288:W5k+Yqaxrh3Nln+N52fIA4jbsvZzFVA4:gY9xrh3NDfIA4jOZx
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2328 17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\17323410667d99229b9ce677d696d20502ddaab36e60066e7988d89e342c219aec646f9f24501.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2328
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144B
MD500b2b05f5dd99fba246f29f111762e15
SHA14e5b311cb90a63461a747f37e512f881ae40e7ac
SHA256afe35acf4ca0eafa8bf57e3a3b154bba014ade9659e2179b25e4bc85ec1b7875
SHA51281354013e900f38bf19b5ffbc0b27287c90dfc7f732a6c63e4df032f1498e1394b04e8fba0c8fd4170b3a2fcb9ddf033f1ece7a670f917a0ea6c9086e6aa5f95