Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20250619-en - resource tags
arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system - submitted
03/07/2025, 03:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe
Resource
win10v2004-20250619-en
2 signatures
150 seconds
General
- Target 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe
- Size 4.0MB
- Sample250703-dss2wsdp8x
- SHA256 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c
- MD5 0a4062ad50d9027131234c49f1227000
- SHA1 468ed0b4ec99f8fb2d340fba181202736e55e667
- SHA512 8dc969950e26ab8719828d5e57309eec1b8fb033979822a06c094ab766fd8bc128edb937b2375fcc06ca587074fba15567cd3b3bfaebf899f09e0ea845f51c50
- SSDEEP 49152:iYJCZZ0gw+zUYbafluALfx3rqxDdJQNfd1QfUOwwUORq:IigPzUYm9uALfprsQNnQf7UOR
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1368 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe 1368 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe 1368 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe 1368 41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe"C:\Users\Admin\AppData\Local\Temp\41598ea34fa0d9df0fbc529a40828c3251f13d1afdffd92a882b35cfe3aa8b7c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1368