Analysis
-
max time kernel
93s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2024 18:33
Behavioral task
behavioral1
Sample
d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe
Resource
win10v2004-20241007-en
General
-
Target
d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe
-
Size
185KB
-
MD5
1e8ca8f9363be0905b644cb79203ca8f
-
SHA1
3c46285621e1d48f32e98030e43278dbc839a26e
-
SHA256
d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7
-
SHA512
b39893cb91305cdf082b13f2f139c7f6fa435785c577a4a21549710842ccec74d43b7d82665233cc7dfe26e9cb1d6a4f8fd9ce8b0b7fb1137da47e599c21a982
-
SSDEEP
3072:QS4Hokzf7GsDaEJ3MB5/fOQCuci6Vu5XavPvdmilfZXIoJDlF6bQm6:CTz1M//kPi6Vu5qMil3PFmQm
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3852 d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe 3852 d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe"C:\Users\Admin\AppData\Local\Temp\d7b5ad2732b766a5180fd78a4299e86597cb2e32bba25eef3a7c74eb8a84fde7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3852