5a6a8a21b381d6334ca28d7768d98d57c18900a8128f6420c000f8f6cb66b0b8

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
28/07/2024, 01:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2f665117a453aeccf49cd09c06a62a90N.exe
Size

1.0MB
MD5

2f665117a453aeccf49cd09c06a62a90
SHA1

22f74c63d33c3cf34a6d9d3e2df6befa7b7f6ab5
SHA256

5a6a8a21b381d6334ca28d7768d98d57c18900a8128f6420c000f8f6cb66b0b8
SHA512

acc55d52dc0d13a88fe4248523e009379f8aa5e20bf99b10461f79fc4c449ad81fdb9b66428053f120ad93932fbddeb4dc3734bf4360c0a011f82d548721498e
SSDEEP

6144:J1OzpPId26dQcEaUrPvwgwkRVagRoDHTj8K1sqI6VLp4XOigSbduP/1HHm/hHAML:jIId79EaUTvwieMozMEcOigSpuPMaLi

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2f665117a453aeccf49cd09c06a62a90N.exe

C:\Users\Admin\AppData\Local\Temp\2f665117a453aeccf49cd09c06a62a90N.exe
"C:\Users\Admin\AppData\Local\Temp\2f665117a453aeccf49cd09c06a62a90N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-0-0x0000000073F9E000-0x0000000073F9F000-memory.dmp

Filesize
4KB

Download
memory/3028-1-0x00000000002E0000-0x00000000002EE000-memory.dmp

Filesize
56KB

Download
memory/3028-2-0x0000000073F90000-0x000000007467E000-memory.dmp

Filesize
6.9MB

Download