Analysis
-
max time kernel
134s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2024 02:30
Static task
static1
Behavioral task
behavioral1
Sample
c44486d020369a758b9abd528c6e5a5fcd9178d18f9064858f134947e3269c03.exe
Resource
win7-20240903-en
General
-
Target
c44486d020369a758b9abd528c6e5a5fcd9178d18f9064858f134947e3269c03.exe
-
Size
80KB
-
MD5
be775bcf7b33c2744b602d4863dfe64e
-
SHA1
9d27da438663b46c8128326fe3f34f01a7be9b74
-
SHA256
c44486d020369a758b9abd528c6e5a5fcd9178d18f9064858f134947e3269c03
-
SHA512
d6eb1c1e0629726eb2c5969e21358d0c9a20c2a7edb7c4ffa952e5415ca3aa6997b05a35afa5cf86f23679a0cfcfda9d24822d0cc70aee1094bc312a81f63ef4
-
SSDEEP
1536:TDlJkYjmjHrdSFokTDNbXePlm26a2sGEHToFwaDnm29C7gpUr7evfhSrwv:TDlaYjgHrdwDhXePlm26loTuwk5s7gp
Malware Config
Signatures
-
Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
flow ioc 4 https://jira.ops.aol.com/secure/attachment/688199/failwhale.html -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c44486d020369a758b9abd528c6e5a5fcd9178d18f9064858f134947e3269c03.exe