7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04-10-2024 01:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a.exe
Size

482KB
MD5

f055c74729b56c8a7147af1ef0526932
SHA1

8b85b9046049f7c0e8b93b0ba2b9351e58a07f98
SHA256

7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a
SHA512

6dc43afa3828e58d808fd792b639de7c96a12991f7336bb755ab22361b7dcc3f931f45988f3cdfba5db84928a61e3df2db53d95802fa6c333ff84d16570c4638
SSDEEP

6144:bTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZmAX4crCT4:bTlrYw1RUh3NFn+N5WfIQIjbs/ZmNT4

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4100	7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a.exe

C:\Users\Admin\AppData\Local\Temp\7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a.exe
"C:\Users\Admin\AppData\Local\Temp\7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\1210\logs.dat

Filesize
144B

MD5
a1c08a5c08482ef042e9fef9490ea5f6

SHA1
64b8101948805490244e2be9621ac0cfe6cabc81

SHA256
ba4bc44093eaf78ec2fd4fdb478a3ff9ca7c36096cf2a7597878a962379f3489

SHA512
c4db61188a9a1e4e0202e1d63ac31c18b67a0a1c0e1adaf4cb2f1e1caa2b39ea43a91acf53a88b94d7d1719f37f4032e7f88ee590029bd75b31409032cc722a4

Download Submit