87922e8d99cd460d6d8699258cbbd050c805e1793ec178ffa7771510506f53ec

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
06/08/2024, 08:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8411005adadfd220a2c54878492a07a0N.exe
Size

144KB
MD5

8411005adadfd220a2c54878492a07a0
SHA1

8be41a4f6b94b66490ae42f0bcf710627e4e788d
SHA256

87922e8d99cd460d6d8699258cbbd050c805e1793ec178ffa7771510506f53ec
SHA512

00d445d1956c84aa3c915d6564c547e05607766e14f5402838e173992b4fdcb4f962fdd68f412f25230da3329c01f4b1c2ceb479b5fd2830656a66039a6a7941
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXa3lpN1:RqKvb0CYJ973e+eKZ0Va

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8411005adadfd220a2c54878492a07a0N.exe

C:\Users\Admin\AppData\Local\Temp\8411005adadfd220a2c54878492a07a0N.exe
"C:\Users\Admin\AppData\Local\Temp\8411005adadfd220a2c54878492a07a0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...