3b0a120990c0b5d4e14d0f2db667100fcba4c7e4bcd89f37d136f777852044d4

Analysis

max time kernel
415s
max time network
1141s
platform
windows10-2004_x64
resource
win10v2004-20240730-es
resource tags

arch:x64arch:x86image:win10v2004-20240730-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
02/08/2024, 00:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Bejeweled 2 Deluxe Install.exe
Size

22.4MB
MD5

8c622e1063f17f03b2144247b2976ded
SHA1

994b1b122d4d4bdfaaa7183fd97c032918f8ef5d
SHA256

3b0a120990c0b5d4e14d0f2db667100fcba4c7e4bcd89f37d136f777852044d4
SHA512

41cd6a3cde288f99e557a529346c6f3059e7e4bd56d78668b58ce464dd84f28ba7398b8e664538d16b2f84af40884a37e2100eb6e551948da2550d450a9c1793
SSDEEP

393216:MCalNjd9qeANMrW31SCB7VNuPa/UBQ914RbMKA7AWHdHehorFUoG1vEXx5na3wc0:3and9xA2613B7/ua4Rr09dv+78hs3T+r

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Bejeweled 2 Deluxe Install.exe

C:\Users\Admin\AppData\Local\Temp\Bejeweled 2 Deluxe Install.exe
"C:\Users\Admin\AppData\Local\Temp\Bejeweled 2 Deluxe Install.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2748

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...