2fe091a7d5c480b861b9bb6c9bbd4b6a1e0800b8833e2e820ed2c73fa2d39062

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
02-09-2024 09:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8208ad549ca6007ab25554dbc6f3daf0N.exe
Size

100KB
MD5

8208ad549ca6007ab25554dbc6f3daf0
SHA1

70c5477c59c6dc3ab719df75798e6795bb082340
SHA256

2fe091a7d5c480b861b9bb6c9bbd4b6a1e0800b8833e2e820ed2c73fa2d39062
SHA512

7d597d4ceb2e90e0176613a748bd042d67625e22112599ff8025fedf7302fe8262f00c19a068f0572e30901dfba6c799f64f58b4d6dcc46e06bc822a8cf7ed7f
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBG:PqFF2Ie+ef4G

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8208ad549ca6007ab25554dbc6f3daf0N.exe

C:\Users\Admin\AppData\Local\Temp\8208ad549ca6007ab25554dbc6f3daf0N.exe
"C:\Users\Admin\AppData\Local\Temp\8208ad549ca6007ab25554dbc6f3daf0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads