6b6facbae84b671906e4a2502652f9ecc85ed972606855a931d855fa3f7ad234

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
05/08/2024, 09:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$TEMP/downloader_easeus/2.2.0/5trial/aliyun/InfoForSetup.exe
Size

61KB
MD5

590682b853848e2119f74d9b79a079c0
SHA1

dfd265c022b769245e1217242af2f0f77cbe3432
SHA256

d824d6f746c8dfb8c5aefff3ead1b66a6d770075c7400445b4bb8b668de0ee41
SHA512

f896dad146a9939f8c65cdd932cca408c589558e7d6693dc5b25c811935ae2ed3f43acd6783aa47b83d632baa7ce9298c251e03e4132110e589ccf2bdf195bd8
SSDEEP

768:Tlo/MU0MQBr6xtYlQsSPIe5HLF//6HARKUu1qG5n3KgpnTgy/MId50LbpYiBwB:TeEZMQBru2n4LVCH8KUjGpJT50Z7Bg

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	InfoForSetup.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\2.2.0\5trial\aliyun\InfoForSetup.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\2.2.0\5trial\aliyun\InfoForSetup.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads