9ea264ca52503037ae7935c8cc5f17f8d6c6456e8d8f2d6d7dea71650638d425

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
02-09-2024 06:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4f00971f288114ade35d5db2897bcff0N.exe
Size

193KB
MD5

4f00971f288114ade35d5db2897bcff0
SHA1

fa6437cc48611aceb1f0741e0271fdc4ab672108
SHA256

9ea264ca52503037ae7935c8cc5f17f8d6c6456e8d8f2d6d7dea71650638d425
SHA512

6bd24ef5bf431f434f282cacb9ecd8831d51d4821f90392efc49039c0748c143b186393492dcf6b5d15f089288808f29a34264185d1633d2d01d01a0cf4eb0ee
SSDEEP

3072:6e76mQSo7ZLKIKIHSXIBlf08qySzCetFtJSuSSSskCTaqW+0JO2XKFbd0U:RemQSoytJNTaW

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4f00971f288114ade35d5db2897bcff0N.exe

C:\Users\Admin\AppData\Local\Temp\4f00971f288114ade35d5db2897bcff0N.exe
"C:\Users\Admin\AppData\Local\Temp\4f00971f288114ade35d5db2897bcff0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads