03c40b511beb3a6a67312257baad3f36186af4841c6bc0e3d63c7480e27d2f5f

Analysis

max time kernel
93s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/10/2024, 17:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

03c40b511beb3a6a67312257baad3f36186af4841c6bc0e3d63c7480e27d2f5fN.exe
Size

95KB
MD5

853bc1ef52f623bec1dfcd483fdd6e00
SHA1

ab635fe0d60e219d95153b73263dda8b32b5d178
SHA256

03c40b511beb3a6a67312257baad3f36186af4841c6bc0e3d63c7480e27d2f5f
SHA512

48291e9ac34e3b8a82a898663d47d73812671101ed9726951847c08a7690ab51671093c75b3a29303d0f1d458b6e5c18837ab17e81739516ffb8c8faa6d80f8b
SSDEEP

1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGLtErPm:6e76mQSohsUsUKDtErO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	03c40b511beb3a6a67312257baad3f36186af4841c6bc0e3d63c7480e27d2f5fN.exe

C:\Users\Admin\AppData\Local\Temp\03c40b511beb3a6a67312257baad3f36186af4841c6bc0e3d63c7480e27d2f5fN.exe
"C:\Users\Admin\AppData\Local\Temp\03c40b511beb3a6a67312257baad3f36186af4841c6bc0e3d63c7480e27d2f5fN.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...