9a982648dd5161c72dc582704a4d9d911229f49c4eaeef87514f098dec121ede

Analysis

max time kernel
17s
max time network
18s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
05/08/2024, 15:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a8480e471e1d6190055329cac4d32690N.exe
Size

62KB
MD5

a8480e471e1d6190055329cac4d32690
SHA1

04d946e4a1ca47800ac903e82fab27a30ef5fa4f
SHA256

9a982648dd5161c72dc582704a4d9d911229f49c4eaeef87514f098dec121ede
SHA512

4ff9416f0814e0533a83c3136ad23013522283c6d7967967cc95bf859551ad074ad130e69c191bf127b3628764a757d014f8f42ee7a29e5b8891f511c3e9e013
SSDEEP

384:GBt7Br5xjLPAgA71FbhvUr11tn03j11tn0380U0GIr8BpUjcVer8BpUjcVJ10U0C:W7BlprpARFbhJ68nNIreUYEreUYX1n/

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a8480e471e1d6190055329cac4d32690N.exe

C:\Users\Admin\AppData\Local\Temp\a8480e471e1d6190055329cac4d32690N.exe
"C:\Users\Admin\AppData\Local\Temp\a8480e471e1d6190055329cac4d32690N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads