Overview
overview
10Static
static
100caa6fb680...c6.exe
windows7-x64
100caa6fb680...c6.exe
windows10-2004-x64
10165ec181ff...71.exe
windows7-x64
9165ec181ff...71.exe
windows10-2004-x64
919f1fcac5e...22.exe
windows7-x64
319f1fcac5e...22.exe
windows10-2004-x64
31a3642fa7d...de.exe
windows7-x64
101a3642fa7d...de.exe
windows10-2004-x64
10$PLUGINSDI...ia.dll
windows7-x64
3$PLUGINSDI...ia.dll
windows10-2004-x64
31d6d8960e8...5d.exe
windows7-x64
91d6d8960e8...5d.exe
windows10-2004-x64
9213f46a611...fc.exe
windows7-x64
9213f46a611...fc.exe
windows10-2004-x64
9284c9bd06a...47.exe
windows7-x64
9284c9bd06a...47.exe
windows10-2004-x64
92b08cbe646...d4.exe
windows7-x64
92b08cbe646...d4.exe
windows10-2004-x64
92c44be7232...76.exe
windows7-x64
62c44be7232...76.exe
windows10-2004-x64
62e1deb95bf...f0.exe
windows7-x64
92e1deb95bf...f0.exe
windows10-2004-x64
92f7a2890d3...2b.exe
windows7-x64
102f7a2890d3...2b.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
24-12-2024 21:34
Behavioral task
behavioral1
Sample
0caa6fb680e981e7d3353f19f830903c9e6438ecb14ddaa237ce747619d7d4c6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0caa6fb680e981e7d3353f19f830903c9e6438ecb14ddaa237ce747619d7d4c6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
165ec181ff15e423abd3aa500bea857faf12fa34b4d53618028bd7a69af2eb71.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
165ec181ff15e423abd3aa500bea857faf12fa34b4d53618028bd7a69af2eb71.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
19f1fcac5e8dbd1d8ff78a295a3a16b533defb40a414dd360a6f75ca5101ac22.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
19f1fcac5e8dbd1d8ff78a295a3a16b533defb40a414dd360a6f75ca5101ac22.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
1a3642fa7da48a4950a11c6346c5fa1b3a61eff52c076603b1c4d005406cfede.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
1a3642fa7da48a4950a11c6346c5fa1b3a61eff52c076603b1c4d005406cfede.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/Sibuia.dll
Resource
win7-20241023-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/Sibuia.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
1d6d8960e8999bed25a88c4b9c8ad5f92f5314f2b50a012bcc7a6873ddcba25d.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
1d6d8960e8999bed25a88c4b9c8ad5f92f5314f2b50a012bcc7a6873ddcba25d.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
213f46a61158000136d67452f6c638949db7a60674ed2af8379f6bbe7acb49fc.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
213f46a61158000136d67452f6c638949db7a60674ed2af8379f6bbe7acb49fc.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
284c9bd06ae67203244ed420c798188c7d0846938b21ba970ce64318452d6947.exe
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
284c9bd06ae67203244ed420c798188c7d0846938b21ba970ce64318452d6947.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
2b08cbe646e4941556c400c8a9f4f2a073514d0ef919a88612696907f560aed4.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
2b08cbe646e4941556c400c8a9f4f2a073514d0ef919a88612696907f560aed4.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
2c44be72321c29c1c20f09fb5c78ed59b76a74926f5581a77b13c6fafb502076.exe
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
2c44be72321c29c1c20f09fb5c78ed59b76a74926f5581a77b13c6fafb502076.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
2e1deb95bfe713cf40cbb21b3821a83bb1d3cdda412ce78456e3e31741034cf0.exe
Resource
win7-20241023-en
Behavioral task
behavioral22
Sample
2e1deb95bfe713cf40cbb21b3821a83bb1d3cdda412ce78456e3e31741034cf0.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
2f7a2890d38eeb574b1c357854c137c1403dfc0db6410a8e0186339da862c52b.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
2f7a2890d38eeb574b1c357854c137c1403dfc0db6410a8e0186339da862c52b.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20241007-en
General
-
Target
19f1fcac5e8dbd1d8ff78a295a3a16b533defb40a414dd360a6f75ca5101ac22.exe
-
Size
3.8MB
-
MD5
159d99d1c7dabfcbb864fb263e03bb87
-
SHA1
30bd2880c9af88eab81f9a18c13d18d2d2f55afc
-
SHA256
19f1fcac5e8dbd1d8ff78a295a3a16b533defb40a414dd360a6f75ca5101ac22
-
SHA512
40571a4b0a9a2ef2b9c49151521bd8f5cbc105367ba9f6d34c6eee692d05aecd08ec5b40b4ba8289000c403a16258e36a91497157562a9cd343f86f9ec4f87f1
-
SSDEEP
98304:QPfulv3wyIb50YFX0oTMVxtCyPb8tTUCC49JGKc/cyyZitU7ioI:GWlv3eb5xFX0RVGZtM4rjc/cGtb/
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 19f1fcac5e8dbd1d8ff78a295a3a16b533defb40a414dd360a6f75ca5101ac22.exe