Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
13-01-2025 01:08
Behavioral task
behavioral1
Sample
9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe
Resource
win10v2004-20241007-en
General
-
Target
9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe
-
Size
17.4MB
-
MD5
3827adadf374dd3ab7d52129cf5af732
-
SHA1
8b263acd904ce7f4a771aa2b8a550438527b8e15
-
SHA256
9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80
-
SHA512
ec81f2eadda56f6f04d1bbda9ea018c490590b2ae7b47c2c92b0f59bf465b00c846af4b47dafa48aa6117377c704a12c375ba9b9c503c427769fc82557e9e1bc
-
SSDEEP
393216:bnH+my0WyNUHKocdtQsvcsM0wZzRA/Wbo4YkSbOTByWR:bHlyx9Hpcdast85CW87OIU
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Blackguard family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 9da83c32bb80000a2962d88e1ec38b8ce3e0fc0da671cb082fe315550dffba80.exe