Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
16-12-2024 22:34
Behavioral task
behavioral1
Sample
1734388385543fca13ccf5614dc71c1922a5cd8cddeb80fc9e4bce55f618d2232c3744cd06117.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1734388385543fca13ccf5614dc71c1922a5cd8cddeb80fc9e4bce55f618d2232c3744cd06117.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
1734388385543fca13ccf5614dc71c1922a5cd8cddeb80fc9e4bce55f618d2232c3744cd06117.dat-decoded.exe
-
Size
481KB
-
MD5
f14e833c2b69a9637a7c7d7af31aadea
-
SHA1
3cee372cff015aa08ff4d085d8d7c8eefb0d1a78
-
SHA256
5294488f02dcfa41ad7b603ad9658346c028c5855781e5f41c6a2c94030ba96f
-
SHA512
6fad90820cade81e24049b6bdeca8df1946ac76aae0806a186e896bc43179328529f3fb9d19ea81329be9de499dd7a9104765b163988c1813f0e1a5a35a8aaaf
-
SSDEEP
12288:L9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5S+P32:Z43HfwIGYMcn5PJrZM+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1734388385543fca13ccf5614dc71c1922a5cd8cddeb80fc9e4bce55f618d2232c3744cd06117.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1734388385543fca13ccf5614dc71c1922a5cd8cddeb80fc9e4bce55f618d2232c3744cd06117.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\1734388385543fca13ccf5614dc71c1922a5cd8cddeb80fc9e4bce55f618d2232c3744cd06117.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1860