78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22-08-2024 03:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe
Size

2.9MB
MD5

87a5492afe046c5d593985f205dbad75
SHA1

be0322e2e19d4331fb4cfd24ef21d87c8b959453
SHA256

78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449
SHA512

fd906ee20da16a40b3a6cee3a9c21682e217278fe3e87a10263f22f314282962d508f8bfb842dfd18e32625687eff6f5b573e36e473ab96c607c2d3a31117ec5
SSDEEP

49152:H1M1LFgmU0KxHH0wPN+TPfHyYrI6l9r6GvhPJ99qITv4VX5fr9wEHA75zeZ1Wva:H1YBgmUvxHUCN+TPfHyYrI6lsGvhPJ9K

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1596	78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe
1596	78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe
1596	78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe
1596	78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe

C:\Users\Admin\AppData\Local\Temp\78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe
"C:\Users\Admin\AppData\Local\Temp\78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads