d4d16325c1e1ce00e7539d00ac31ec6f08379fe4d314950f926d1859dd889f0d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
24/08/2024, 04:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d4d16325c1e1ce00e7539d00ac31ec6f08379fe4d314950f926d1859dd889f0d.exe
Size

73KB
MD5

633336b1ea428eca4e80d3ed5a1d2a58
SHA1

bfc23cd7c4185567c9b195615b9c9dcb63064a2a
SHA256

d4d16325c1e1ce00e7539d00ac31ec6f08379fe4d314950f926d1859dd889f0d
SHA512

2072f224ab1a3ac941f0d0aadb9285288a1e73304914395c276e2757b1f526d21166f0cd794506f21532a1395334ec55465103ffb0cce9d80366569dfc021fed
SSDEEP

768:W7BlphA7dASbSjJJcbQbf1Oti1JGBQOOiQJhATNyIHAJvHAJLMF/XqpBT37CPKKy:W7ZhA7dABJJZENTNy3MTW7JJZENTNy3A

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d4d16325c1e1ce00e7539d00ac31ec6f08379fe4d314950f926d1859dd889f0d.exe

C:\Users\Admin\AppData\Local\Temp\d4d16325c1e1ce00e7539d00ac31ec6f08379fe4d314950f926d1859dd889f0d.exe
"C:\Users\Admin\AppData\Local\Temp\d4d16325c1e1ce00e7539d00ac31ec6f08379fe4d314950f926d1859dd889f0d.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...