7eec80377762b67317a64b37394d89c2e356f340851e4c84e1e7149944b7e597

Analysis

max time kernel
112s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
27-07-2024 02:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7e347fc756f51ab8d42e6d9acaa44930N.exe
Size

156KB
MD5

7e347fc756f51ab8d42e6d9acaa44930
SHA1

707f4fbdf9105fe9e6ccfb17c0a1e7b6b3027a99
SHA256

7eec80377762b67317a64b37394d89c2e356f340851e4c84e1e7149944b7e597
SHA512

19d57c04ed2dbd77eab4e65e4c4c56b6f95f3d7ddd82a3b0973d348260f30d80f246600ce1b9b28352afd699aad2320ca05b36f0cec32dd22c2fa57f818c7b15
SSDEEP

3072:1s3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/0/Fnncra5971cP:1DeM7iNEkgiOb31k1ECSJR5Jy

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7e347fc756f51ab8d42e6d9acaa44930N.exe

C:\Users\Admin\AppData\Local\Temp\7e347fc756f51ab8d42e6d9acaa44930N.exe
"C:\Users\Admin\AppData\Local\Temp\7e347fc756f51ab8d42e6d9acaa44930N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4000-0-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/4000-4-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/4000-7-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/4000-11-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download