43c49314e8d913f3e52258363f10ce9d7887a5eb4db656d271cd71362c1433f7

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
06-08-2024 03:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4f8e0b4d73aa06575b27a5352f3df270N.exe
Size

103KB
MD5

4f8e0b4d73aa06575b27a5352f3df270
SHA1

7fda5c870f6318011d785cf5904704c5fa6abbbd
SHA256

43c49314e8d913f3e52258363f10ce9d7887a5eb4db656d271cd71362c1433f7
SHA512

9385406001e4a5717bf72be9877a608dd61089974cafa58da5817e63f8950c5376ba4349cfb449e3d3b331758609ddbf09f37ab3c558aac1d2abd0130e5f6e1b
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBH:PqFF2Ie+eF4

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4f8e0b4d73aa06575b27a5352f3df270N.exe

C:\Users\Admin\AppData\Local\Temp\4f8e0b4d73aa06575b27a5352f3df270N.exe
"C:\Users\Admin\AppData\Local\Temp\4f8e0b4d73aa06575b27a5352f3df270N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads