cd9e23cf10254963e08240cbbd2ed7a2074f4d696b1eec81498fef8240582aa2

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 13:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5a57a7dab784b4444e4cf48189737220N.exe
Size

141KB
MD5

5a57a7dab784b4444e4cf48189737220
SHA1

0ed2449bfef7bc0575d8dcc7695d71e1bd598440
SHA256

cd9e23cf10254963e08240cbbd2ed7a2074f4d696b1eec81498fef8240582aa2
SHA512

42b0775926b3503b1f17cd336a1f1455bab8148ffafa8e98e770639481e95c784bcf44c57789288340875f696f63762fb5499abb3115b01a6c74b82728c3994f
SSDEEP

1536:W7ZppApqvZvXTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJRayxaJB:6pWp46W2QZwKS78P

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5a57a7dab784b4444e4cf48189737220N.exe

C:\Users\Admin\AppData\Local\Temp\5a57a7dab784b4444e4cf48189737220N.exe
"C:\Users\Admin\AppData\Local\Temp\5a57a7dab784b4444e4cf48189737220N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2136

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads