19f69533bba4fb389e58566308e23c528fabc5b9b6cba976c07bf112604d8490

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22-08-2024 03:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2df90c1c4b05570040da5a0638493970N.exe
Size

902KB
MD5

2df90c1c4b05570040da5a0638493970
SHA1

17fa7297a2b645e8cb234447d4ca9873509b5818
SHA256

19f69533bba4fb389e58566308e23c528fabc5b9b6cba976c07bf112604d8490
SHA512

05049e5313990e79ef96d08d210f69967db479bc35e104e0624a60516da4ece9c85f9aff4ed3123e7c72bad2e00e7e8b3a72165aad2b7226b67d467651c25c70
SSDEEP

24576:U20KXhv2NUeCdgqYkgAFmTJ09UONS3RTfdZ7bYuF+KrM:U2Vv2N7CfYc0UUONS3RR7oWM

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2df90c1c4b05570040da5a0638493970N.exe

C:\Users\Admin\AppData\Local\Temp\2df90c1c4b05570040da5a0638493970N.exe
"C:\Users\Admin\AppData\Local\Temp\2df90c1c4b05570040da5a0638493970N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2568-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2568-2-0x0000000000401000-0x000000000040B000-memory.dmp

Filesize
40KB

Download
memory/2568-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download