8beabd20eb19cc7738fb706a82663a148c62d88b3ba5a3408d37b9184ff73034

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
02-08-2024 18:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c1086e3ab451fa7702ae4fd924a91a50N.exe
Size

49KB
MD5

c1086e3ab451fa7702ae4fd924a91a50
SHA1

0499d7d9e67ea85780c86abf2f1b6581591c2dc1
SHA256

8beabd20eb19cc7738fb706a82663a148c62d88b3ba5a3408d37b9184ff73034
SHA512

629ef5ce076f02da84784f503236897747bcd028937bc0211824981a5351a2c56c7dad26e63e0ed24b189a955d5246f73443dfde9c3e2d0350b573385c68cb41
SSDEEP

768:W7BlpppARFbhknrzzA8JQ2AdJCzA8JQ2AdJcUYU30N7AVn0N7AVaYW:W7ZppApkxUYU30NQn0NQaYW

Score

5^/10

discovery

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Zombie.exe	c1086e3ab451fa7702ae4fd924a91a50N.exe
File opened for modification	C:\Windows\SysWOW64\Zombie.exe	c1086e3ab451fa7702ae4fd924a91a50N.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c1086e3ab451fa7702ae4fd924a91a50N.exe

C:\Users\Admin\AppData\Local\Temp\c1086e3ab451fa7702ae4fd924a91a50N.exe
"C:\Users\Admin\AppData\Local\Temp\c1086e3ab451fa7702ae4fd924a91a50N.exe"
1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
PID:2468
- C:\Windows\SysWOW64\Zombie.exe
  "C:\Windows\system32\Zombie.exe"
  2⤵
  PID:2484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads