Overview
overview
10Static
static
10270e9ba7fa...c4.exe
windows7-x64
5270e9ba7fa...c4.exe
windows10-2004-x64
53410297259...58.exe
windows7-x64
13410297259...58.exe
windows10-2004-x64
36f09c7f423...50.exe
windows7-x64
56f09c7f423...50.exe
windows10-2004-x64
5866e097ff5...39.exe
windows7-x64
5866e097ff5...39.exe
windows10-2004-x64
59419d53b0d...8d.exe
windows7-x64
59419d53b0d...8d.exe
windows10-2004-x64
5fa9d1e3fd2...51.exe
windows7-x64
5fa9d1e3fd2...51.exe
windows10-2004-x64
5Analysis
-
max time kernel
92s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2024 18:17
Behavioral task
behavioral1
Sample
270e9ba7fa51858ba35182e14d0b91c4.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
270e9ba7fa51858ba35182e14d0b91c4.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
341029725926d6ce55334f5a51dc1358.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
341029725926d6ce55334f5a51dc1358.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
6f09c7f423232ef509f90e66b1146a50.exe
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
6f09c7f423232ef509f90e66b1146a50.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
866e097ff53dbfefe7b3289abda15939.exe
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
866e097ff53dbfefe7b3289abda15939.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
9419d53b0db3f157a6011c8657ba118d.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
9419d53b0db3f157a6011c8657ba118d.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
fa9d1e3fd2983aca146b2a04ddf6e351.exe
Resource
win7-20240708-en
General
-
Target
341029725926d6ce55334f5a51dc1358.exe
-
Size
181KB
-
MD5
341029725926d6ce55334f5a51dc1358
-
SHA1
8f1663c10307c4ad9b6d43c748abc1c27cea2da8
-
SHA256
76e2040321ed7cc5ff6ced0a91b8e8546b7f9a4eab5802beb8ce137b0da48244
-
SHA512
6386ea5cefda66ab1bd11ae7527bdce3d5d0b6806f398583164af67a4c22ef2ebcea69f5dc9d42d6ba5c6675b56a1a82c1eca99d597992fc6de65a6c5572671b
-
SSDEEP
3072:LEinlOfZPvHa2FSK6vFmG6agepBvxdiNH7FO9pSg/wjzF5XXr1:rqZKMSBv83a7ppXiFFO98g/Ez
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 341029725926d6ce55334f5a51dc1358.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5032 341029725926d6ce55334f5a51dc1358.exe 5032 341029725926d6ce55334f5a51dc1358.exe