8c70d22076d1b51e8a34035692239ff5071dfbc85a72bb506f386086c45626e8

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
18/08/2024, 15:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

27e3fa4b409ff686bd712bd355276e80N.exe
Size

133KB
MD5

27e3fa4b409ff686bd712bd355276e80
SHA1

00f42701d81fa6d258700f7a76c45eac5be4ee2f
SHA256

8c70d22076d1b51e8a34035692239ff5071dfbc85a72bb506f386086c45626e8
SHA512

4105bfb6073dd887dbd47110211d0e3283f26a15cd6a2f0cffec903da20323560f39c7bf5b5711e8e4dbcee1f1769b6c1c1ee88d284a84879f0f89effc6dae6f
SSDEEP

1536:W7ZhA7pApw03vR03vxSKSWu0SWuPTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayr:6e7WpwYRYxSKSWu0SWuP6W2QZwKS7I

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	27e3fa4b409ff686bd712bd355276e80N.exe

C:\Users\Admin\AppData\Local\Temp\27e3fa4b409ff686bd712bd355276e80N.exe
"C:\Users\Admin\AppData\Local\Temp\27e3fa4b409ff686bd712bd355276e80N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2692

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads