Overview
overview
10Static
static
10bca3772529...45.exe
windows7-x64
10bca3772529...45.exe
windows10-2004-x64
10bccb34575f...72.exe
windows7-x64
10bccb34575f...72.exe
windows10-2004-x64
10bcf1af9a5a...be.exe
windows7-x64
10bcf1af9a5a...be.exe
windows10-2004-x64
8bcf783e363...97.exe
windows7-x64
3bcf783e363...97.exe
windows10-2004-x64
3bd515574dc...8c.exe
windows7-x64
1bd515574dc...8c.exe
windows10-2004-x64
1bd68ca7605...39.exe
windows7-x64
10bd68ca7605...39.exe
windows10-2004-x64
10bd707a0357...e3.exe
windows7-x64
9bd707a0357...e3.exe
windows10-2004-x64
9bd7edfedeb...0b.exe
windows7-x64
10bd7edfedeb...0b.exe
windows10-2004-x64
10bdad1ff46d...f2.exe
windows7-x64
10bdad1ff46d...f2.exe
windows10-2004-x64
10bdae9ff159...df.exe
windows7-x64
10bdae9ff159...df.exe
windows10-2004-x64
10be01d2552c...1c.exe
windows7-x64
10be01d2552c...1c.exe
windows10-2004-x64
10be077774c9...87.exe
windows7-x64
10be077774c9...87.exe
windows10-2004-x64
10be0a8aeb7e...56.exe
windows7-x64
3be0a8aeb7e...56.exe
windows10-2004-x64
3be1643898c...f5.exe
windows7-x64
7be1643898c...f5.exe
windows10-2004-x64
10be183db6d4...94.exe
windows7-x64
10be183db6d4...94.exe
windows10-2004-x64
10be2375e810...94.exe
windows7-x64
10be2375e810...94.exe
windows10-2004-x64
10Analysis
-
max time kernel
151s -
max time network
162s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22/03/2025, 06:15
Behavioral task
behavioral1
Sample
bca3772529d1a336233bb4e59a704d5217e6e1f7b80222d2d028bfc816cb5445.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bca3772529d1a336233bb4e59a704d5217e6e1f7b80222d2d028bfc816cb5445.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
bccb34575fb2db34d4a29075cb2f9aa39904b7d5412695545f2240c00fbb0472.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
bccb34575fb2db34d4a29075cb2f9aa39904b7d5412695545f2240c00fbb0472.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
bcf1af9a5a93ae74ea1c79da9951c5be.exe
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
bcf1af9a5a93ae74ea1c79da9951c5be.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
bcf783e363557f5bdd4014c159ae2497.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
bcf783e363557f5bdd4014c159ae2497.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral9
Sample
bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
bd68ca7605316450c87b9218d2dbe19d8c5694e07b93f320f3ca4a9ad902c139.exe
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
bd68ca7605316450c87b9218d2dbe19d8c5694e07b93f320f3ca4a9ad902c139.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
bd707a0357b19ea6953d47900bb051e3.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
bd707a0357b19ea6953d47900bb051e3.exe
Resource
win10v2004-20250313-en
Behavioral task
behavioral15
Sample
bd7edfedebe8a680d801ffd5b2415cd3877e95c78edb8cfc44eaae3e0e9a1e0b.exe
Resource
win7-20250207-en
Behavioral task
behavioral16
Sample
bd7edfedebe8a680d801ffd5b2415cd3877e95c78edb8cfc44eaae3e0e9a1e0b.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral17
Sample
bdad1ff46d46963cc687d5f6889c9ef2.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
bdad1ff46d46963cc687d5f6889c9ef2.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral19
Sample
bdae9ff15952ccdfec0be80562f1cbdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
bdae9ff15952ccdfec0be80562f1cbdf.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral21
Sample
be01d2552c64422f1b97721af2e07451309244c21e464bbe47b603043d95b21c.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
be01d2552c64422f1b97721af2e07451309244c21e464bbe47b603043d95b21c.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral23
Sample
be077774c9e78bbe8c9388aa7d552de77e9ef40ec732ea193da049a0db2e5787.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
be077774c9e78bbe8c9388aa7d552de77e9ef40ec732ea193da049a0db2e5787.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral25
Sample
be0a8aeb7e1655bee6255bac9c2947ecef511b5f00e29933dfd9c7f39965bf56.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
be0a8aeb7e1655bee6255bac9c2947ecef511b5f00e29933dfd9c7f39965bf56.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral27
Sample
be1643898cf51a24e38e4044d24ae1f5.exe
Resource
win7-20241023-en
Behavioral task
behavioral28
Sample
be1643898cf51a24e38e4044d24ae1f5.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral29
Sample
be183db6d4b77c092496c69c3f389b94.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
be183db6d4b77c092496c69c3f389b94.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral31
Sample
be2375e810af4d76a0fc392d8acf2d1218cd2c21a6b8160be7f1f30ef7cf4694.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
be2375e810af4d76a0fc392d8acf2d1218cd2c21a6b8160be7f1f30ef7cf4694.exe
Resource
win10v2004-20250314-en
General
-
Target
bcf783e363557f5bdd4014c159ae2497.exe
-
Size
65KB
-
MD5
bcf783e363557f5bdd4014c159ae2497
-
SHA1
3e80d9ff00d3866486f765789f20b94a7c270bc2
-
SHA256
3f572151e9e2d4d2fb18eb77d53fbec0a0cf1d5eac7322fb21319a12fdcd1fa0
-
SHA512
ee767b2305fdd63feb503c60f9788fbe9a75862129f8f19b955b7c2049489f7821fc82f2bb64e14f1e1f13f5cdfec09d9d0d0ca937744c79572d94baaa1b17aa
-
SSDEEP
1536:lzOe7oN36tbQviFw1scvIBnvnifLteF3nLrB9z3nraF9bYS9vM:lzOe7oN36tbQviFCHABnqfWl9z7aF9b
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bcf783e363557f5bdd4014c159ae2497.exe -
Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: 33 2496 bcf783e363557f5bdd4014c159ae2497.exe Token: SeIncBasePriorityPrivilege 2496 bcf783e363557f5bdd4014c159ae2497.exe