Analysis
-
max time kernel
120s -
max time network
24s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
19-12-2024 00:49
Static task
static1
Behavioral task
behavioral1
Sample
64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe
Resource
win10v2004-20241007-en
General
-
Target
64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe
-
Size
116KB
-
MD5
2fb04a87317bbec79dc95bb4f8d7a500
-
SHA1
9a929b27ea7b9ce1c227a96629b1a3d58e38f786
-
SHA256
64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699
-
SHA512
6acfaab2d57feb423909006df9b573c7a5145636cebb337b8f39f23b0852289d55cedcb03b9e8813529e8262727691710ab80934a61831575f60d10b2ce9272b
-
SSDEEP
1536:JOH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5PxVm:JCKQJcinxphkG5Q6GdpIOkJHhKRfm
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1916 64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe"C:\Users\Admin\AppData\Local\Temp\64a57c5c757e26322960b0803f7c816e5b04cd565170c2068e59e7d95ef9b699N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1916