af5c3b487b8b7ee1ee4138f3e452e3154f13e8b58c21a05f31592482819ce6fc

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
29/08/2024, 06:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7z.exe
Size

137KB
MD5

e419d5e293a9adf64dee552831a4b363
SHA1

3313866cdfdfc6406c52034b3685ea0177acca7e
SHA256

4d81aeea0c3c116878f2cc2be27d58f8140fffd01f9213924891449a262c3111
SHA512

3dc8b204161be7f2429df915fbb66fb86fbb930a5d606628a0218fe00fdc7699de9ee60ea7df0582c06f8a57d7965d51309cc539ebcf701a865e823658712f92
SSDEEP

3072:ipjmwO35Vs+6xZ/UTyj7WQQlu+450yj5nqAKCcmlOyFj5:2dO35Vs+UU+j7Yc5qAKChhFj

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7z.exe

C:\Users\Admin\AppData\Local\Temp\7z.exe
"C:\Users\Admin\AppData\Local\Temp\7z.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads