05a5b1a9bb7398b54648632f8aa6ec0a51980e23e8403579425639d2a5ec875d

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
27-07-2024 01:46

Target

7c9f75df28d4801de03de61913dc6660N.exe
Size

46KB
MD5

7c9f75df28d4801de03de61913dc6660
SHA1

7477c4e50c3f60aa6f23b2e22eb847993b0098a7
SHA256

05a5b1a9bb7398b54648632f8aa6ec0a51980e23e8403579425639d2a5ec875d
SHA512

8d87ac1680fb6879f20eed00c52a82d261d05964014bd4a942ad5dedb79e540c3dbd622dc3cd6f32fc1c535861014c333662994092c40cc942ebaeb31388ee4d
SSDEEP

384:GBt7Br5xjL9AgA71Fbhv7bhvo42L5FgAytBpR42L5FgAytBpW/yu4L+qg:W7BlpppARFbhjbhg42LcfpR42LcfpW/P

Score

3^/10

discovery

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

7c9f75df28d4801de03de61913dc6660N.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7c9f75df28d4801de03de61913dc6660N.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7c9f75df28d4801de03de61913dc6660N.exe

C:\Users\Admin\AppData\Local\Temp\7c9f75df28d4801de03de61913dc6660N.exe
"C:\Users\Admin\AppData\Local\Temp\7c9f75df28d4801de03de61913dc6660N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2116

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact