Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
06-01-2025 01:16
Behavioral task
behavioral1
Sample
54e79356ecc87ec98f18d71128d95592db4e0fc38f5622bec3060f6ba5d6411f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54e79356ecc87ec98f18d71128d95592db4e0fc38f5622bec3060f6ba5d6411f.exe
Resource
win10v2004-20241007-en
General
-
Target
54e79356ecc87ec98f18d71128d95592db4e0fc38f5622bec3060f6ba5d6411f.exe
-
Size
17.4MB
-
MD5
554a9f036ad6a64ef1831b06182f1c18
-
SHA1
f2e1fdfdc41b6ea81751f13ba54309ce0cbb3e70
-
SHA256
54e79356ecc87ec98f18d71128d95592db4e0fc38f5622bec3060f6ba5d6411f
-
SHA512
52d68fefc1c82cf0224344e656b36db3c80aa9be8a64b3636f63f5f80c5be3c29b9fec4e4b5665a47dec403f8b705e200f32375ab663afb8e70030376d85ba69
-
SSDEEP
393216:onH+my0WyNUHKocdtQsvcsM0wZzRA/Wbo4YkSbOTByWR:oHlyx9Hpcdast85CW87OIU
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Blackguard family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 54e79356ecc87ec98f18d71128d95592db4e0fc38f5622bec3060f6ba5d6411f.exe