Overview
overview
10Static
static
10IDA-Pro-7....ol.exe
windows7-x64
3IDA-Pro-7....ol.exe
windows10-2004-x64
3idaclang77...ng.exe
windows7-x64
1idaclang77...ng.exe
windows10-2004-x64
1idasdk77/d...st.exe
windows7-x64
1idasdk77/d...st.exe
windows10-2004-x64
3idasdk77/d...st.exe
windows7-x64
3idasdk77/d...st.exe
windows10-2004-x64
3IDA-Pro-7....64.dll
windows7-x64
1IDA-Pro-7....64.dll
windows10-2004-x64
1IDA-Pro-7....te.exe
windows7-x64
3IDA-Pro-7....te.exe
windows10-2004-x64
3IDA-Pro-7....64.exe
windows7-x64
1IDA-Pro-7....64.exe
windows10-2004-x64
1IDA-Pro-7....da.exe
windows7-x64
5IDA-Pro-7....da.exe
windows10-2004-x64
1IDA-Pro-7....64.dll
windows7-x64
1IDA-Pro-7....64.dll
windows10-2004-x64
1IDA-Pro-7....64.exe
windows7-x64
1IDA-Pro-7....64.exe
windows10-2004-x64
1IDA-Pro-7....ch.exe
windows7-x64
1IDA-Pro-7....ch.exe
windows10-2004-x64
1IDA-Pro-7....64.exe
windows7-x64
5IDA-Pro-7....64.exe
windows10-2004-x64
5IDA-Pro-7....rv.dll
windows10-2004-x64
1Analysis
- max time kernel
23s - max time network
52s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/01/2025, 22:10
Behavioral task
behavioral1
Sample
IDA-Pro-7.7-main/IDA_InitTool.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
IDA-Pro-7.7-main/IDA_InitTool.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
idaclang77/win/idaclang.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
idaclang77/win/idaclang.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
idasdk77/dbg/bochs/sdk/bxtest.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
idasdk77/dbg/bochs/sdk/bxtest.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
idasdk77/dbg/bochs/sdk/test.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
idasdk77/dbg/bochs/sdk/test.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
IDA-Pro-7.7-main/clp64.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
IDA-Pro-7.7-main/clp64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
IDA-Pro-7.7-main/dbgsrv/win32_remote.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
IDA-Pro-7.7-main/dbgsrv/win32_remote.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
IDA-Pro-7.7-main/dbgsrv/win64_remote64.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
IDA-Pro-7.7-main/dbgsrv/win64_remote64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
IDA-Pro-7.7-main/ida.exe
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
IDA-Pro-7.7-main/ida.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
IDA-Pro-7.7-main/ida64.dll
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
IDA-Pro-7.7-main/ida64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
IDA-Pro-7.7-main/ida64.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
IDA-Pro-7.7-main/ida64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
IDA-Pro-7.7-main/idapyswitch.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
IDA-Pro-7.7-main/idapyswitch.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
IDA-Pro-7.7-main/idat64.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
IDA-Pro-7.7-main/idat64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
IDA-Pro-7.7-main/symsrv.dll
Resource
win10v2004-20241007-en
General
- Target IDA-Pro-7.7-main/IDA_InitTool.exe
- Size 12KB
- Sample250109-13nw9aspdw
- SHA256 2ad67d19e50ebdbfa0ceb57f2f45fda34a3cc938bbfa06851f7a5ff6fdce3f1f
- MD5 6a33471545c5e31419e1e6626a7794f1
- SHA1 b746499486a929fcc7015af01e5f66864da5a98e
- SHA512 0fdc79240acb703739bf770b079cb29b9a835cfc31e252742423be97239d5d04a1ffb25295726438b350312f20c38c7f93f6e9363c4cc921a869f7e2690d6d17
- SSDEEP 192:uXelyQg6j7eS/sNp3dD+yVa3v+yKo4eHe2j4kpC89FY0sEdCqAsoD:seXg6ZOp3V+yVGv+b++axplFY0s9qZ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IDA_InitTool.exe