fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03/10/2024, 16:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063.exe
Size

1.9MB
MD5

1a9cb172eeee79dcd749bf25880c05f2
SHA1

e7d04cd59074ca5cfde9b7442b5290584b25567f
SHA256

fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063
SHA512

af7408e50e92f438fe931f22857178e529fb32e9adc75aef8e898036a2a262270ece6f0abd09a63b42641c31ae529a4ceb3fa15527f0997f91e5d351b208d0d6
SSDEEP

49152:y1BMyvRN2fnmdY2ibTWvh+/mwKJfmW3/pwW09wZC6eGfioTd:yvMyvRN2fnmW2Xvh+/mr9BwN9wZC6LjZ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1848	fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063.exe
1848	fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063.exe

C:\Users\Admin\AppData\Local\Temp\fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063.exe
"C:\Users\Admin\AppData\Local\Temp\fbbea55fd580c67d189bb712d2770d3906cac78a3561cfe38c156f75bf843063.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads