37037addfbb525940b452ce344d158eb3cfe0b402dee5268964634f9958b1b6a

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03/09/2024, 09:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a073164a1795de023e640177e3cb07a0N.exe
Size

143KB
MD5

a073164a1795de023e640177e3cb07a0
SHA1

772328e93d92c341826dfa5a7735b65dc97a011e
SHA256

37037addfbb525940b452ce344d158eb3cfe0b402dee5268964634f9958b1b6a
SHA512

6dff5e785f7ae396dabc24ff629511e5e63556c5530d673c17c01a4b88c41572a011c54e7f7f7f8d921ad413c60bfb51b39f6aae9916c8a13bb1963f90d92c74
SSDEEP

1536:W7Z+pAp2nKLN8e24pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+p0RpYp:6+Wp2nerWHIjN3tj6qnv0b2UrXkbvL2

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a073164a1795de023e640177e3cb07a0N.exe

C:\Users\Admin\AppData\Local\Temp\a073164a1795de023e640177e3cb07a0N.exe
"C:\Users\Admin\AppData\Local\Temp\a073164a1795de023e640177e3cb07a0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...