Analysis
-
max time kernel
148s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
15/02/2025, 11:34
Behavioral task
behavioral1
Sample
17396192448946e62cbd597a50369267dd506c5761d409fa19f09a8e2ea77ff0146976e438732.dat-decoded.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
17396192448946e62cbd597a50369267dd506c5761d409fa19f09a8e2ea77ff0146976e438732.dat-decoded.exe
Resource
win10v2004-20250207-en
General
-
Target
17396192448946e62cbd597a50369267dd506c5761d409fa19f09a8e2ea77ff0146976e438732.dat-decoded.exe
-
Size
482KB
-
MD5
2ce7da7998979afc24852902c4b19dc9
-
SHA1
ec8005b10e4a4a233c649609c2d9938c50b62cc7
-
SHA256
cc8d2da0d629c07ba1d736d48445dbca313615f44ff29e265dc7d507dbb6d069
-
SHA512
1dc73c5693abd0ac96d7a328194b72280587b790ba9cc9af424af40d332daa7d95d0743e4dc5db62f5b3b78712ac955470a8bcad2b0ed18688f326cc9b1c9b9e
-
SSDEEP
12288:513ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQoS:rak/mBXTV/R0nEF76gFZT
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 17396192448946e62cbd597a50369267dd506c5761d409fa19f09a8e2ea77ff0146976e438732.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17396192448946e62cbd597a50369267dd506c5761d409fa19f09a8e2ea77ff0146976e438732.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\17396192448946e62cbd597a50369267dd506c5761d409fa19f09a8e2ea77ff0146976e438732.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3032