Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
02/08/2024, 03:28
General
-
Target
$EXEDIR/RegOrganizerPortable/Data/StartupCheckingService.exe
-
Size
3.4MB
-
MD5
af97dfec81768590e55118ea990b8e0e
-
SHA1
1f7f432be30d471277af9f2fd3cd114488cf074b
-
SHA256
795705069bc34eca087e1f15ec5c441c76dde9ca54e2993c4c62f3b1203fb794
-
SHA512
cd1d82568cea05ef28d230462b8a4308df858ce665a929d7f1366b26d28bc9e3379b6b7fc870a8457e364d353a10e0b56129e4acc4b614ad4adc75c50a24a9e5
-
SSDEEP
49152:s442F3iaCzrldK0jICXBqtyz4tJZoSApkQH2U2hE034omd7IIyItgyOKIF964ANZ:6zC0c6lz4tugU2gwO
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RegOrganizerPortable\Data\StartupCheckingService.exe"C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RegOrganizerPortable\Data\StartupCheckingService.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.5MB