Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
28/03/2025, 10:52
Static task
static1
Behavioral task
behavioral1
Sample
DNF誓言.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DNF誓言.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
初始系统.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
初始系统.exe
Resource
win10v2004-20250314-en
General
-
Target
DNF誓言.exe
-
Size
330KB
-
MD5
48c84bea28cd758d6564de3452a8428f
-
SHA1
f55dd618a3b3b9fb435f218a588514f97bfaf9b0
-
SHA256
48e08374677b016ffb69776de6b0b204fc0d08a94132f6b3f3a215b72cbefacd
-
SHA512
2d90a9204a39534496cd6a33e7bedc36f2c1ad3e7cc77a92a7ce1f64afda86cb8438906980b4e57c439e9aea47ab7737c2c15401153abbf356a4e32e0905705a
-
SSDEEP
6144:1apQDAdicHtWC7l0uyX63VZ+7xbWT9mCNIlk8Udz5LJMOqLRjl1/MtOx3js+sC:82DAIcN6uyXeVZibWelkRR5LDqtjr/Tt
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DNF誓言.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2304 DNF誓言.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2304 DNF誓言.exe 2304 DNF誓言.exe 2304 DNF誓言.exe 2304 DNF誓言.exe 2304 DNF誓言.exe