Analysis
- max time kernel
100s - max time network
104s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system - submitted
24/08/2025, 09:19
Behavioral task
behavioral1
Sample
WeChat.exe
Resource
win10v2004-20250619-en
2 signatures
150 seconds
General
- Target WeChat.exe
- Size 2.8MB
- Sample250824-laf9datmx9
- SHA256 f26500ee852cdb8e17853efc48c3cfb5b08bebdbe2a37bc5a9009ab1b854d64b
- MD5 25f774cf317041e4f5bf5660a696b4a6
- SHA1 a22247deabea3e94db9787cad5c80986b5f1ea7d
- SHA512 2f3801f281ebc63fc5abb92447811f0c650daefac941c147af17e4ed3c3ee3f9f43da449e87ad5dfc784641418d33026c5e7f4a5fd7ece234dc6c4de009e4a5e
- SSDEEP 49152:hvP2Yd+bgkAspLXbHl/KImpQklhpPjeWuhyHwC6OkzeQW4ZqvuqP+Ia:9ePPVCb5F6rhyQPAvuqP+Ia
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1564-0-0x0000000000E10000-0x0000000001511000-memory.dmp upx behavioral2/memory/1564-1-0x0000000000E10000-0x0000000001511000-memory.dmp upx behavioral2/memory/1564-4-0x0000000000E10000-0x0000000001511000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WeChat.exe