df8c05ee1450b6d26507285468b92b16c9dd7c512d366c8d8ab49d5eecae41ba

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25-09-2024 20:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

df8c05ee1450b6d26507285468b92b16c9dd7c512d366c8d8ab49d5eecae41baN.exe
Size

974KB
MD5

3a49f658788df64664382e1a5d15fdd0
SHA1

51e56adbb3cfb8a450b043b12c2de10e9b2a63ee
SHA256

df8c05ee1450b6d26507285468b92b16c9dd7c512d366c8d8ab49d5eecae41ba
SHA512

c444ab8d9843659990bafda7b7f7dfa389f652d8ed96bc928826b0babeb594978d2c7f32f1c1d254266cdbe297b78d10935b0c87327353f200502bc7603743d8
SSDEEP

24576:4slivJCFt2rzoRAIfG+4adA6IL6/uW8X1:Vq224RAIfGr6ILEL8X1

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	df8c05ee1450b6d26507285468b92b16c9dd7c512d366c8d8ab49d5eecae41baN.exe

C:\Users\Admin\AppData\Local\Temp\df8c05ee1450b6d26507285468b92b16c9dd7c512d366c8d8ab49d5eecae41baN.exe
"C:\Users\Admin\AppData\Local\Temp\df8c05ee1450b6d26507285468b92b16c9dd7c512d366c8d8ab49d5eecae41baN.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads