956ca867c2764c223d74002cda0e09ba7ad68183d46224e2e46b5ff717cacd9b

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/09/2024, 03:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7701f0dca6028e1b41de8b66c3a2d9c0N.exe
Size

40KB
MD5

7701f0dca6028e1b41de8b66c3a2d9c0
SHA1

24193f922f7216a56c9b864e669e1096a3992477
SHA256

956ca867c2764c223d74002cda0e09ba7ad68183d46224e2e46b5ff717cacd9b
SHA512

3a1233b4e955b64642b8d41dc05ad6b0ac28bb66c2b80624ceeab83a622198a27be90ba20a795026d0ac0bc2670bb9758c679d2c595035edf74416a69ebc0a70
SSDEEP

768:2b2Uh2uIBjvaEGU4aikqykezg2XpfYBjYioRopTqhl5:a2I2b81Dezg2ZfY4ol65

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7701f0dca6028e1b41de8b66c3a2d9c0N.exe

C:\Users\Admin\AppData\Local\Temp\7701f0dca6028e1b41de8b66c3a2d9c0N.exe
"C:\Users\Admin\AppData\Local\Temp\7701f0dca6028e1b41de8b66c3a2d9c0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...