dc42523e5454f4ee99807f6c3f0c6a3b125397881fa867f533452be4f37fecf6

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
05/08/2024, 06:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

60bd44be7a54c9d116261bfa1cab9c70N.exe
Size

733KB
MD5

60bd44be7a54c9d116261bfa1cab9c70
SHA1

317e8d1c81ecdb78ed3ff26d6eb611e52bf5b633
SHA256

dc42523e5454f4ee99807f6c3f0c6a3b125397881fa867f533452be4f37fecf6
SHA512

c0341749b88f001a618dab5831d7cf3a40fde705ab0d47a94ed6a19c48db01be80ecece1725069305ee999654f577c2af0e5411e0a958539851e6c5d4ee00cd6
SSDEEP

3072:6pWpktsUVXxXmkZMGZqceyYDIqCdIwHSwO5ls:PoVhWOPgc+1s

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	60bd44be7a54c9d116261bfa1cab9c70N.exe

C:\Users\Admin\AppData\Local\Temp\60bd44be7a54c9d116261bfa1cab9c70N.exe
"C:\Users\Admin\AppData\Local\Temp\60bd44be7a54c9d116261bfa1cab9c70N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads