a16833835a1377dc4d5d47b934cbc67aa894894e44fb483bf7b2fb39c30c1ef5

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-08-2024 05:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

63bb580df4f2c65208dfd84554710820N.exe
Size

2.7MB
MD5

63bb580df4f2c65208dfd84554710820
SHA1

9d418dee8af46195795e75a5c3aa5561e4ef7b7c
SHA256

a16833835a1377dc4d5d47b934cbc67aa894894e44fb483bf7b2fb39c30c1ef5
SHA512

21d206301624ebd13f2255cb9b4650a4c7930be15c90a62e34e0b4fa205442872a903c4468b3f52d9ebc0af54a37b54e7366c718abf2118a14adc32dc70899df
SSDEEP

49152:TM84pX/4MnYYJ2ZhqSGLHkJEMawnNTBgEqnstLet3LyvDzx:wfgIDQ52EqnstLEoDF

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	63bb580df4f2c65208dfd84554710820N.exe

C:\Users\Admin\AppData\Local\Temp\63bb580df4f2c65208dfd84554710820N.exe
"C:\Users\Admin\AppData\Local\Temp\63bb580df4f2c65208dfd84554710820N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads