e51d7341c5d0629eb9a98b0899a700a580edd8822cab29eae0ea94661600fdd0

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09/09/2024, 03:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e51d7341c5d0629eb9a98b0899a700a580edd8822cab29eae0ea94661600fdd0.exe
Size

78KB
MD5

436866ca577b621a88963babce9dd44a
SHA1

296eb297ccb8904bb74d5c040bc0fb1e7dc6cd0f
SHA256

e51d7341c5d0629eb9a98b0899a700a580edd8822cab29eae0ea94661600fdd0
SHA512

20d410e94b4cc9002ab9c8accbe91e3aef571c3a2a3dc5ef4521755c343749b7e95ac408d90e13d067d800c411f05c064a5f40d376f91a8138f19aeb7ab28215
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJwRJofJoTt4Y74YKazPI0GUN2scvKRttrXtHnCSoWP:W7ZppApaJofJo7VGgEvKRzNC5Wek

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e51d7341c5d0629eb9a98b0899a700a580edd8822cab29eae0ea94661600fdd0.exe

C:\Users\Admin\AppData\Local\Temp\e51d7341c5d0629eb9a98b0899a700a580edd8822cab29eae0ea94661600fdd0.exe
"C:\Users\Admin\AppData\Local\Temp\e51d7341c5d0629eb9a98b0899a700a580edd8822cab29eae0ea94661600fdd0.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2332

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...