Analysis
-
max time kernel
147s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12-02-2025 19:57
Behavioral task
behavioral1
Sample
173938974581cb151128ca784119c32fdf5dfcf7ed21f9608d0d70df8183c6f068821cf3b5867.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
173938974581cb151128ca784119c32fdf5dfcf7ed21f9608d0d70df8183c6f068821cf3b5867.dat-decoded.exe
Resource
win10v2004-20250211-en
General
-
Target
173938974581cb151128ca784119c32fdf5dfcf7ed21f9608d0d70df8183c6f068821cf3b5867.dat-decoded.exe
-
Size
482KB
-
MD5
fc570c9f6a838dc449c7e3b230bde9de
-
SHA1
cd18dde286608328c10f8dceed377f4f9b1fb526
-
SHA256
c80ad2f3f977fca5d2b2a6c9d7b6a50c2648d030b6b37a93f5b9c5be025f9972
-
SHA512
c2340dd40aa43adc6a8dec0afc05fad3bc71a0a36cbe86b1553af148026b850707e763bb288243f8d90e1cd86ac78aed6190dbbf7fe85c28db84063a7a5f1311
-
SSDEEP
12288:513ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQIS:rak/mBXTV/R0nEF76gFZH
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 173938974581cb151128ca784119c32fdf5dfcf7ed21f9608d0d70df8183c6f068821cf3b5867.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\173938974581cb151128ca784119c32fdf5dfcf7ed21f9608d0d70df8183c6f068821cf3b5867.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\173938974581cb151128ca784119c32fdf5dfcf7ed21f9608d0d70df8183c6f068821cf3b5867.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1980