847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4

Analysis

max time kernel
147s
max time network
150s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
01/09/2024, 01:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4.exe
Size

482KB
MD5

0125adef6e9eed738ebac6e35c21c5ea
SHA1

ea37d0d7f4b5f9d8577ade5c1a2f9c6558c2ca2d
SHA256

847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4
SHA512

49e6134cf459de8c9a778a511b03bd514b222c9c98849ffb1dffd315911eb095677ae4787132ec32a7cdaafffb68d44696ee2db55348c3c106b90a5a507549f7
SSDEEP

6144:STz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZBAXccrnT4:STlrYw1RUh3NFn+N5WfIQIjbs/ZBsT4

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2632	847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4.exe

C:\Users\Admin\AppData\Local\Temp\847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4.exe
"C:\Users\Admin\AppData\Local\Temp\847f0f5e71d536638fbd6c3141b0508c9f3ae1e1e4e9619ebc4e65b627a7c5d4.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\media\logs.dat

Filesize
144B

MD5
eb8f9dceed9448187efb68fe911b30d1

SHA1
89f79aa455512604ae2a205fdd2b95cbccfc513e

SHA256
57e6995afbb51eac6370e1b79670e492732109326b47c7ace9306636c63283ff

SHA512
003df75f4310024436133ce719adc7e6aea8f936bd6c62edeb706ed43b17fc528570d53cab5f64307e3da47ab20e555fc123dc2ef38893d779bf0e170033ee71

Download Submit