Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2024 03:39
Behavioral task
behavioral1
Sample
fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe
Resource
win10v2004-20241007-en
General
-
Target
fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe
-
Size
483KB
-
MD5
49ab34d1b4cb83377e3b131146a34069
-
SHA1
7868b43dc95bcb7ef410524b2999e7a3cfbb95f0
-
SHA256
fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406
-
SHA512
fe781f015af1d58eca6e6af70c4a8753606ec1131ccc245fa8a1f4e60d77c6eb008fa6a21889f6bf3dd94d5628447678abcc1dd08fd348b685f6a617a0f4eccd
-
SSDEEP
6144:u5zY+w1LqZBCxKedv//NEUn+N5hkf/0TE7RvIZ/jbsAORZzAXMcr1GA4:u5k+Yqaxrh3Nln+N52fIA4jbsvZzbA4
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exepid process 3164 fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe"C:\Users\Admin\AppData\Local\Temp\fa459c21e79f972a2bde5231521395f31dd126583439b379ede17f9cd0d1c406.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3164
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144B
MD57c176e244d0af9329b02afdec99d80d7
SHA1a37cdae384b1230532119a1929969e55667da6e9
SHA256227326b6ce9620ad061defc8a30b1ad6665962193e01f807fe70b9891e798e8c
SHA51213ac14ab4218f4a622459f9caff7b5b6ffd3e174dac3a31fd341106e6f6c4a2cea2e3586e46204ee849817e570044347f38a7e74717309e1870d19645ea36b63