42080c039b00c76bb5f8282060d931b62271209a4cbf96971cd221a26f61f2d0

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
29/08/2024, 01:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f10dcd02e0a50d3e956a1bd9ca851b30N.exe
Size

108KB
MD5

f10dcd02e0a50d3e956a1bd9ca851b30
SHA1

3d3e4ef2d82d1f8dc003747ff6f59d8383c5b48a
SHA256

42080c039b00c76bb5f8282060d931b62271209a4cbf96971cd221a26f61f2d0
SHA512

9c90e61aba3c1453619e0a6199be643f7a24a3f54400b4b501882cb7ee9508015d3c68cf07f5d89fd54d1ece6c545f0fd4fce50acf0be516b1ecbcdfb13e064a
SSDEEP

1536:W7Z2sspApkZrZ4+fU7lK1lKT8/8TViv61XxvEci9vQG9xmX/D562aqQCRg9LKgQ+:62ssWpcU7lK1lKgkK9+6

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f10dcd02e0a50d3e956a1bd9ca851b30N.exe

C:\Users\Admin\AppData\Local\Temp\f10dcd02e0a50d3e956a1bd9ca851b30N.exe
"C:\Users\Admin\AppData\Local\Temp\f10dcd02e0a50d3e956a1bd9ca851b30N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2136

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads