b7dd3bce3ebfbc2d5e3a9f00d47f27cb6a5895c4618c878e314e573a7c216df1

Resubmissions

25-08-2024 18:37

240825-w9lm9aybld 10

25-08-2024 18:31

240825-w6eqjazcpm 10

25-08-2024 18:25

240825-w2whgsxgjb 10

Analysis

max time kernel
294s
max time network
322s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
25-08-2024 18:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

The-MALWARE-Repo-master/Net-Worm/Opaserv.l.exe
Size

28KB
MD5

71c981d4f5316c3ad1deefe48fddb94a
SHA1

8e59bbdb29c4234bfcd0465bb6526154bd98b8e4
SHA256

de709dacac623c637448dc91f6dfd441a49c89372af2c53e2027e4af5310b95d
SHA512

e6ed88ce880e0bbb96995140df0999b1fb3bd45b3d0976e92f94be042d63b8f5030d346f3d24fbadd9822a98690a6d90ba000d9188b3946807fd77735c65c2b1
SSDEEP

768:6AAhTSe5L5gNRy0V3eU8HtsoeohmhwZRGX8:6AAXL5gNRy0ViHtsoe+gX8

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Opaserv.l.exe

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Net-Worm\Opaserv.l.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Net-Worm\Opaserv.l.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3876-0-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/3876-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download