31e4c376b370c738dd3371836f071d037c6eb041206636ef059b05aa082c17f2

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 19:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

31e4c376b370c738dd3371836f071d037c6eb041206636ef059b05aa082c17f2.exe
Size

48KB
MD5

db4987863747b06a71cd86c2692c815c
SHA1

947e7049479b49fdb2517d52699efbe72fc38dbe
SHA256

31e4c376b370c738dd3371836f071d037c6eb041206636ef059b05aa082c17f2
SHA512

f2a77aafff4adc75995d5992578677cf2d6012a79a4ea4a5867e5441782fb8918ea2a77a16710476761cd0b3d0199d1b32b4f6439946b743a87778acad311e22
SSDEEP

768:9GvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3Kd8VVrG2i:4zqsQ5PIt4+/yfeB6rXVrGZ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	31e4c376b370c738dd3371836f071d037c6eb041206636ef059b05aa082c17f2.exe

C:\Users\Admin\AppData\Local\Temp\31e4c376b370c738dd3371836f071d037c6eb041206636ef059b05aa082c17f2.exe
"C:\Users\Admin\AppData\Local\Temp\31e4c376b370c738dd3371836f071d037c6eb041206636ef059b05aa082c17f2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\My Downloads\Hard Truck 18 Wheels of Steel Full Downloader.exe

Filesize
48KB

MD5
c3718229a41ddecbbef1bb9b6c34e423

SHA1
f4b32cd97147c32098685d57da5248bb5d1fb261

SHA256
51a7ff1b19edcbaa9b338966b9405e55d8342849f78db9c9173ac49c32679f3d

SHA512
fff250d3b334d5c063265e1d49adce1660c0529d30092334fff1e1cb43d605c942364f134f658ec5b2b5c1141efc3a3a9583653f1c8370022296562209e5a2b5

Download Submit
memory/1620-100-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download