5ef168f83b55d2cbd2426afc5e6fa8161270fa6a2a312831332dc472c95dfa42

Analysis

max time kernel
15s
max time network
18s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28-09-2024 11:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

pskill.1.exe
Size

381KB
MD5

5801303c49e5bb612aa55fb8b909a9c9
SHA1

b9cf22418a5c45ede9fb44680fa7f3d90a1e0bee
SHA256

5ef168f83b55d2cbd2426afc5e6fa8161270fa6a2a312831332dc472c95dfa42
SHA512

1d0f97cb61320bfad6d4a4a3f47f6feac8c57166a1dfbf3aab1da705e8739a1250cb5930403095a23ad1a8fc5b119a63f55a2218e1bcf2718c881f8f2b501c30
SSDEEP

6144:erJT3E2vJM6rZ82ywZnVXxm9AOWDTaKC1CegGN85SH5dmIYL:eZ0eJM6rDz2CaKCE1IZwIYL

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pskill.1.exe

C:\Users\Admin\AppData\Local\Temp\pskill.1.exe
"C:\Users\Admin\AppData\Local\Temp\pskill.1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads