eaeb673aa7f6e69b24c842484b465efd0c61b9e244994a03346f536df185aa9b

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/09/2024, 05:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

51Ƽ10.19.exe
Size

249KB
MD5

2d3e4f10df51d5a16bb4c2c84fa9836a
SHA1

30d6b28d455591af7e9f56e1405f8d133790890b
SHA256

34a95ed4bf0de1cd1fbe1192eaf1f37a5015152eb7172a1eec9b388d5f04917e
SHA512

a696c17c82e02c58ba9305cd1062bb16379cdbb8c3e0205e0acd3185e69a9704cc034d92bfaeac81f0f2aec1234a4f70fbe67b2c6ab47b997d5bf24420451436
SSDEEP

6144:db9LfAd6FfWZGb+A9422eox1foSbF3qTRNb:dJrQKZ2eo/LbF6T

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	51Ƽ10.19.exe

C:\Users\Admin\AppData\Local\Temp\51Ƽ10.19.exe
"C:\Users\Admin\AppData\Local\Temp\51Ƽ10.19.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2316-0-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download