b3f4337a6e3b870d36fcbe7245eb35695f951373894d6ab75aea02aacd81cf64

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
05/08/2024, 23:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

26215acc5936fd9527d760f424412e10N.exe
Size

62KB
MD5

26215acc5936fd9527d760f424412e10
SHA1

fd878c36ea07a960fd2cc196f04d3a94c428149a
SHA256

b3f4337a6e3b870d36fcbe7245eb35695f951373894d6ab75aea02aacd81cf64
SHA512

2d9860b90bbbe5ec2a26cb35c2b97569ebdd77d6a85f477ab9470b19331a8b6739e0f6e5f6bb114517f571be00a0696ddb9b55eff268c70440c01e039cdd17ae
SSDEEP

1536:368N2vP/HAUjk64GuRh4hi9O9/9XCs1rLiRQx36jbuhvAJbv:36jfgUjk6Qh4hi9O9os1E4Wqhvwv

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	26215acc5936fd9527d760f424412e10N.exe

C:\Users\Admin\AppData\Local\Temp\26215acc5936fd9527d760f424412e10N.exe
"C:\Users\Admin\AppData\Local\Temp\26215acc5936fd9527d760f424412e10N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\My Downloads\Mafia Crack.exe

Filesize
62KB

MD5
26215acc5936fd9527d760f424412e10

SHA1
fd878c36ea07a960fd2cc196f04d3a94c428149a

SHA256
b3f4337a6e3b870d36fcbe7245eb35695f951373894d6ab75aea02aacd81cf64

SHA512
2d9860b90bbbe5ec2a26cb35c2b97569ebdd77d6a85f477ab9470b19331a8b6739e0f6e5f6bb114517f571be00a0696ddb9b55eff268c70440c01e039cdd17ae

Download Submit
memory/2604-0-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/2604-101-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download