916715cdd3cb9f6670424bd4f72682cdc4343d79fd36b19de992ee2c3095ecde

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-10-2024 18:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

xuhsbsshb.exe
Size

4KB
MD5

daa39e25fb5b25bd1e42408efdac928f
SHA1

665426ddf94268322d180128a92ddb2f45b1d3b8
SHA256

7e5a0ec65f4c96a6b8de07c341282da8777fc45f4976e415f1738fa165d0a272
SHA512

42cae6cc93a923965a65b70c68a46e63246d5af0175cbf7e4fc33ecf8d5bd2ffc1395c4237411292136daf36ebf132567cfa2f6dc2a7ec7d33d482cee2cb4903

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xuhsbsshb.exe

C:\Users\Admin\AppData\Local\Temp\xuhsbsshb.exe
"C:\Users\Admin\AppData\Local\Temp\xuhsbsshb.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2304

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads