Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25-11-2024 01:22
Behavioral task
behavioral1
Sample
6fb4adda485b48cb490f7995f6ce6179804dcd34408a8ce3e98f7360b0dcc94f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fb4adda485b48cb490f7995f6ce6179804dcd34408a8ce3e98f7360b0dcc94f.exe
Resource
win10v2004-20241007-en
General
-
Target
6fb4adda485b48cb490f7995f6ce6179804dcd34408a8ce3e98f7360b0dcc94f.exe
-
Size
16.8MB
-
MD5
9652bd716bcb7ec87be1aaeef90b7f1a
-
SHA1
77dda0dcd250b2d4af85a695931ff033f1aecef6
-
SHA256
6fb4adda485b48cb490f7995f6ce6179804dcd34408a8ce3e98f7360b0dcc94f
-
SHA512
e683a3e4e951c77b47535a72efa07154379572a4246cce180bd5e598e0c979a970477fda4e96427861d5274f967ff236e284de15b9337206ee801284249c3c66
-
SSDEEP
393216:pnHP4y0WyNUHKoc8tQsvcsM0wZzRA/Wbo4YkSbOTByWR:pHwyx9Hpc8ast85CW87OIU
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Blackguard family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
6fb4adda485b48cb490f7995f6ce6179804dcd34408a8ce3e98f7360b0dcc94f.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6fb4adda485b48cb490f7995f6ce6179804dcd34408a8ce3e98f7360b0dcc94f.exe