5d1c293db7f1bc6d9e7b2bb9e998a63ae3e7e785d9cb13ea9e2311f64be71641

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
21/08/2024, 02:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

887be25f6358a0ceed1fa869d70bff50N.exe
Size

174KB
MD5

887be25f6358a0ceed1fa869d70bff50
SHA1

30ace299c80aa17b7484a3bf8dd7370ba092d3fa
SHA256

5d1c293db7f1bc6d9e7b2bb9e998a63ae3e7e785d9cb13ea9e2311f64be71641
SHA512

9487d7eb01e84ab403f97be3c055079cb5b1018f161dff94ff0ae61c104bd13badc24a71e7ed94314bbd8243c9fffe26952cd9400d87800daee7bb5a40afea97
SSDEEP

384:GBt7Br5xjLvassAgA71FbhvgqHqMjL4jLS/3MMf/3MMy0U0czyKbNzzyKbN494KS:W7Blp2sspARFbh5YSfffynfWK9WKI4KS

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	887be25f6358a0ceed1fa869d70bff50N.exe

C:\Users\Admin\AppData\Local\Temp\887be25f6358a0ceed1fa869d70bff50N.exe
"C:\Users\Admin\AppData\Local\Temp\887be25f6358a0ceed1fa869d70bff50N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads