a7a1e32a295fe3d501fa623d6986ff0febd60d770223d699e01735666128b5f0

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
02/10/2024, 14:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

launch4j.exe
Size

63KB
MD5

7cd18deed5755993aad29eaaa8a4785d
SHA1

56e92a1b1604eec026c9ca10a30001386977ce45
SHA256

c2c92657b1730d15f51f5e5690e4b477aa8c0c3b43af22dbd7265aca049df59d
SHA512

393fe48a8c18b250ff19b9e73129b19daab38e06fe8242aa7053a6e6c11fdbd276c444f9249daecd35ace4960b3cb8445b359515a1329a6ef8207d50810e9774
SSDEEP

1536:9+XCbdTqMllaUPHXYTTPmC+chT9mWEtwZQ/EH2:ESb0MKWY3tfR2y+/EW

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	launch4j.exe

C:\Users\Admin\AppData\Local\Temp\launch4j.exe
"C:\Users\Admin\AppData\Local\Temp\launch4j.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2516-0-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download