6ec955e6dcfc1c0fbca6bd267201b0711ef87c870f4aa8cb819f8762263d9ac0

Analysis

max time kernel
14s
max time network
21s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27-07-2024 01:55

Target

7d943a941987ffd4ea70d8acffc560a0N.exe
Size

79KB
MD5

7d943a941987ffd4ea70d8acffc560a0
SHA1

4278b58e2287953cf434477a93618adabb3d5993
SHA256

6ec955e6dcfc1c0fbca6bd267201b0711ef87c870f4aa8cb819f8762263d9ac0
SHA512

f3e4d39f85ce9b8fe573ca47f868e003f86e248a72237baf75bd44d9d2e8d32145b74c84ad3184845025f803bf42f86bddb558805c624f2dc0da7e298b932451
SSDEEP

1536:p7ZhA7dAp1++PJHJXA/OsIZfzc3/Q8LvNR:Te76WQSo6vNR

Score

3^/10

discovery

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

7d943a941987ffd4ea70d8acffc560a0N.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7d943a941987ffd4ea70d8acffc560a0N.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7d943a941987ffd4ea70d8acffc560a0N.exe

C:\Users\Admin\AppData\Local\Temp\7d943a941987ffd4ea70d8acffc560a0N.exe
"C:\Users\Admin\AppData\Local\Temp\7d943a941987ffd4ea70d8acffc560a0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2388

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact