1b1fdfdd3eb5b6fb1597944eb0325ff9bc692ba3c2d7eaa8dfe34c4093ba78bb

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
06/09/2024, 18:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

冒险岛强强/MD5查询.exe
Size

28KB
MD5

68ad88cf233ee3e050357df03742600a
SHA1

c609a0a7b5950b7b6210176c72fbb58405c4721a
SHA256

fd9aa4ca79033a4c8481a8ff9e32c6493dcc66e023605c3c509e7d485c57005c
SHA512

9919d28f58ec577871164612c00334675b7a31c7b80bc3a044316e0aa6962c0513d1ab4b9b96fd116932331708d655d22830633a0367bf70dc5aac5e54decaba
SSDEEP

384:ZHSq3bc4ivsSLzwG27W6k2TzFtwX7ryFsoqN1XA8E3wH4MZd9R41PJxCi+e:VSq3bc4ivsMwUBLrZncBxCY

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MD5查询.exe

C:\Users\Admin\AppData\Local\Temp\冒险岛强强\MD5查询.exe
"C:\Users\Admin\AppData\Local\Temp\冒险岛强强\MD5查询.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads