d275507a8c1af840c4da37391d92e9e144ee5d970b84499eae7f8c2a5c11b98a

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
02-08-2024 09:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

192-34-56-49-32.exe
Size

15.3MB
MD5

0ed35085bc066ad51240fe4bf40a53ab
SHA1

c6fd220b6df65062714890d9d64313b98a109d2b
SHA256

d275507a8c1af840c4da37391d92e9e144ee5d970b84499eae7f8c2a5c11b98a
SHA512

bc11b3a22ecdb4521324aff5bf09528253836c561686fc8c0a1ba411c0a063f851d35d4e5daac33cc5bb82786e3f78e96b06bddd0888a48ecb3bd33d70bb6c99
SSDEEP

196608:fZx0bG4qXk9IJRJA5K5mIC0CpQSbrEPdll9g08krnO1Q5l:sqXfAM8bri3Ye

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	192-34-56-49-32.exe

C:\Users\Admin\AppData\Local\Temp\192-34-56-49-32.exe
"C:\Users\Admin\AppData\Local\Temp\192-34-56-49-32.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads