Resubmissions
20/01/2025, 14:20
250120-rnkrlstlal920/01/2025, 14:10
250120-rgp3rasren20/01/2025, 07:44
250120-jkx9jaypay9Analysis
- max time kernel
94s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
20/01/2025, 07:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
D0glun.exe
Resource
win7-20240903-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
D0glun.exe
Resource
win10v2004-20241007-en
1 signatures
150 seconds
General
- Target D0glun.exe
- Size 2.5MB
- Sample250120-jkx9jaypay
- SHA256 a8df7571e871d22f13ba3eb376eddd1f73ce241d24caa878494e1805219b342a
- MD5 845cb027c57783112416a2a32dc87f58
- SHA1 44b0add34a5d97cbac2c3a4bc664027af7351ea4
- SHA512 19e3e186d0454c36f2cd800fb6650ef5fe7336634b302e6fca21de5d42d5338c05bd5a3f16d1ee5add844ee73328f5df0dd419ff74f1c7369cfa2eb5cece82e1
- SSDEEP 49152:vMjUZzwLYglZHVhxUdLaaCp/f+OSeUEb5QuPtp1Yu:UjUZaldVhxUdLa3Vf+OSed5QuPvN
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language D0glun.exe