9d7f54fbf784511853efa820804eb2166b80ddb7aa1b3b925ea24caf9b1e1b1d

Analysis

max time kernel
102s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20/08/2024, 01:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7cfd29d718f726777d5f48ac3e4e0f10N.exe
Size

60KB
MD5

7cfd29d718f726777d5f48ac3e4e0f10
SHA1

7b08e1bc4e5d37b411c4a21aeb304b475f62d482
SHA256

9d7f54fbf784511853efa820804eb2166b80ddb7aa1b3b925ea24caf9b1e1b1d
SHA512

fc61d3ea29d131c8e40196fae1203bfc4dac20d17655fbc22961d036d3c764632b06fee05f8d0eaa12649dc414b04c268e8b0aeba11502ad74e440166041a32c
SSDEEP

768:W7BlphA7pARFbhL801VvM801VvcR2+lJtZ2+lJtSsZefOa:W7ZhA7pApw03vR03vcltdtSsYfr

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7cfd29d718f726777d5f48ac3e4e0f10N.exe

C:\Users\Admin\AppData\Local\Temp\7cfd29d718f726777d5f48ac3e4e0f10N.exe
"C:\Users\Admin\AppData\Local\Temp\7cfd29d718f726777d5f48ac3e4e0f10N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads