9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b

Analysis

max time kernel
13s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
24-08-2024 03:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b.exe
Size

11.5MB
MD5

39fe80b1a646a8738f8158c6c0338574
SHA1

e5717af8961a9fc6b560d66bb9d80fef66c3fe33
SHA256

9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b
SHA512

9908e04b66e3bdaa5ef5c518fe2fad23c461ebb4c61f1570da92a9f71be64ea4780b288286aa0b231dbe7c6d3b40bb35845fe846af17136e093d9c4524636624
SSDEEP

196608:y1yLQbT97sxImD4xm0M+HUQAuCsMgeRIK5D+DbcfQsBTI+dsNEYYP:3S9Rm0xm0/HxHCsM2yIbcfdqEPP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2240	9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b.exe
2240	9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b.exe

C:\Users\Admin\AppData\Local\Temp\9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b.exe
"C:\Users\Admin\AppData\Local\Temp\9ba7d4bb98f02c2e4531003447c12cc83b310756b7ebb7c20b58e67394742d6b.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads