a23f1b8d0aeae7d00d260a03f7cb5c54c43fa4935965bcc71207f700d61d2a30

Analysis

max time kernel
15s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 01:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a23f1b8d0aeae7d00d260a03f7cb5c54c43fa4935965bcc71207f700d61d2a30N.exe
Size

120KB
MD5

67a3e4aefad261e477d7270878d482f0
SHA1

1e89cd65f3470405b3fcd865e548b537ba6c5d5f
SHA256

a23f1b8d0aeae7d00d260a03f7cb5c54c43fa4935965bcc71207f700d61d2a30
SHA512

ea73f92f43ed24c1b80fc8980264f780cad2896613665320f367c8969cb6c5c1e2764eb5f04de9e1394e46ed4bb26de8ab7f696ef75be69f8a6f5d1a48676ad4
SSDEEP

1536:W7ZDpApmauaLXxpXxcY3hx+fsio5UxKzWZ64+A8v:6DWprxNxcVEio5Ua4NA

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a23f1b8d0aeae7d00d260a03f7cb5c54c43fa4935965bcc71207f700d61d2a30N.exe

C:\Users\Admin\AppData\Local\Temp\a23f1b8d0aeae7d00d260a03f7cb5c54c43fa4935965bcc71207f700d61d2a30N.exe
"C:\Users\Admin\AppData\Local\Temp\a23f1b8d0aeae7d00d260a03f7cb5c54c43fa4935965bcc71207f700d61d2a30N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2124

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads