be3e5df2126f4b2d2050bd77d597fdc87ae802212cd992e27bdccebdb88f0629

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
27-07-2024 03:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

be3e5df2126f4b2d2050bd77d597fdc87ae802212cd992e27bdccebdb88f0629.exe
Size

57KB
MD5

7e144f2ac9d319616a4d6f81155b15ba
SHA1

e2d4fd249c54095b04b8a35d48d58c05da3abe93
SHA256

be3e5df2126f4b2d2050bd77d597fdc87ae802212cd992e27bdccebdb88f0629
SHA512

e781434bb695b187e99d0880225abcf6818d6239901109b305f376e9d1861562614405b6f362691f46c74371dafc10d5a28a2893fb0ccb8ab420fee9f752a8dc
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw70EXBwzEXBwGDASxzc:W7ZppApMG

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	be3e5df2126f4b2d2050bd77d597fdc87ae802212cd992e27bdccebdb88f0629.exe

C:\Users\Admin\AppData\Local\Temp\be3e5df2126f4b2d2050bd77d597fdc87ae802212cd992e27bdccebdb88f0629.exe
"C:\Users\Admin\AppData\Local\Temp\be3e5df2126f4b2d2050bd77d597fdc87ae802212cd992e27bdccebdb88f0629.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads