7ac7f02082373022e077670d92fac0a93bb1a3151ecf414f7d8bddede05c2a05

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/09/2024, 14:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7ac7f02082373022e077670d92fac0a93bb1a3151ecf414f7d8bddede05c2a05.exe
Size

131KB
MD5

cb7ad10d3bff15f5bc64c4c2582ae915
SHA1

36c1815571eaea3d22c65732bbed51bc388efec0
SHA256

7ac7f02082373022e077670d92fac0a93bb1a3151ecf414f7d8bddede05c2a05
SHA512

e242b1f5e510d9442662200a437f136b23ac4f9c54d5573870b8538fb377025e5f0d944101ffbaf6e482e44ad2bf2f5d90a569976051b7543e0df4209eae3e67
SSDEEP

768:IZiCp+etRy/oPwzSzaL561woLYxbqOSYnMAP8ioeKUt7naoIcNA3z5C0Qf:fMyAzZLYxbqOpM+3zWoE4f

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7ac7f02082373022e077670d92fac0a93bb1a3151ecf414f7d8bddede05c2a05.exe

C:\Users\Admin\AppData\Local\Temp\7ac7f02082373022e077670d92fac0a93bb1a3151ecf414f7d8bddede05c2a05.exe
"C:\Users\Admin\AppData\Local\Temp\7ac7f02082373022e077670d92fac0a93bb1a3151ecf414f7d8bddede05c2a05.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2440

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2440-0-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download