Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
27-01-2025 22:07
Behavioral task
behavioral1
Sample
1738015563919361d039476f160f7ec710cd59ae63288c5e3374a8a01175bfa08f734a7436492.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1738015563919361d039476f160f7ec710cd59ae63288c5e3374a8a01175bfa08f734a7436492.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
1738015563919361d039476f160f7ec710cd59ae63288c5e3374a8a01175bfa08f734a7436492.dat-decoded.exe
-
Size
482KB
-
MD5
d651cbd4e7f20f7cbd20c223b081eb93
-
SHA1
d76cea47545dd821d4bc701e470f3ebe7fdf86d0
-
SHA256
86afc9cf2673a9631cf9a1f63768108e0885bc84f1bdb39007376406f8eb4ce4
-
SHA512
81e897064b86adeaa22a6000ad393bc4194195fa30e50caa6caf5b55f68726e3d0208bbd15e4c93b5a4a3a36372575f2d723c3c701049d05e8b6a6f70ea9ce61
-
SSDEEP
12288:x13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQXS:jak/mBXTV/R0nEF76gFZ8
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1738015563919361d039476f160f7ec710cd59ae63288c5e3374a8a01175bfa08f734a7436492.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1738015563919361d039476f160f7ec710cd59ae63288c5e3374a8a01175bfa08f734a7436492.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\1738015563919361d039476f160f7ec710cd59ae63288c5e3374a8a01175bfa08f734a7436492.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2292