Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
21-12-2024 02:58
Static task
static1
Behavioral task
behavioral1
Sample
ae5b9a35f35d710b849c3bfb37e848a129855768bd9929b7a85702de3e76e0c8.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ae5b9a35f35d710b849c3bfb37e848a129855768bd9929b7a85702de3e76e0c8.exe
Resource
win10v2004-20241007-en
General
-
Target
ae5b9a35f35d710b849c3bfb37e848a129855768bd9929b7a85702de3e76e0c8.exe
-
Size
289KB
-
MD5
ea2c30769d298e35ba11cd5c5ed2b04f
-
SHA1
e47bc5c3db4cfbc68dfbe6c48a88c87c29b38a13
-
SHA256
ae5b9a35f35d710b849c3bfb37e848a129855768bd9929b7a85702de3e76e0c8
-
SHA512
5e8dd5244fd0c420c79aaf5c9aa7f112189696ae4f7caaa8082acff3e401df3d1d9f84ce4c8ef0c0a768fac4c2495afb192d72e40e2737b8144cb21adebaedb8
-
SSDEEP
6144:UBM4zzQdbt97XKCVqSYkRYfeIUd+NHHDWn9mWhi:4M44dN3YWTITHDqBi
Malware Config
Extracted
stealc
LogsDiller
http://185.219.81.132
-
url_path
/c3d039fb36c40339.php
Signatures
-
Stealc family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ae5b9a35f35d710b849c3bfb37e848a129855768bd9929b7a85702de3e76e0c8.exe