9cb03abde0d26c1fe446413357b6fec6d53025c414f73af8c0b5a22fc8d4dfb1

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
11/08/2024, 00:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9cb03abde0d26c1fe446413357b6fec6d53025c414f73af8c0b5a22fc8d4dfb1.exe
Size

164KB
MD5

23188c0f7bbbf8b73692cee0823c4cf7
SHA1

3be3933ae64b1651f99f970f6bbb5253ba22ade8
SHA256

9cb03abde0d26c1fe446413357b6fec6d53025c414f73af8c0b5a22fc8d4dfb1
SHA512

cdcb366e7ab50dd9581d6b950d987746f67dbbcd7e7237abb5133c7ce72f652a766c837d51ab82a357765581f49d73a7fd6c1936939215f77680f9cc8b278520
SSDEEP

3072:6DWp4WH9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pwp:d79iMGsSaOyi6

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9cb03abde0d26c1fe446413357b6fec6d53025c414f73af8c0b5a22fc8d4dfb1.exe

C:\Users\Admin\AppData\Local\Temp\9cb03abde0d26c1fe446413357b6fec6d53025c414f73af8c0b5a22fc8d4dfb1.exe
"C:\Users\Admin\AppData\Local\Temp\9cb03abde0d26c1fe446413357b6fec6d53025c414f73af8c0b5a22fc8d4dfb1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads