2710f894b73b563d02d700fcb590e21873e42dc4b947ca00114114c7c948dd16

Analysis

max time kernel
116s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08/10/2024, 20:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2710f894b73b563d02d700fcb590e21873e42dc4b947ca00114114c7c948dd16N.exe
Size

16KB
MD5

186445a981b836d7bb81ab4e314174e0
SHA1

f8464250a84151fe66c25cf4777de6c41d8a6dca
SHA256

2710f894b73b563d02d700fcb590e21873e42dc4b947ca00114114c7c948dd16
SHA512

499e260f00f8d6d1af55ff157aebdbef51275177b8c5a13174c2ece2aa3fae6e117e3056a1e320e07623828770b9961b80e8567b591c28ebbce83b423523254a
SSDEEP

384:2V0Aj+2wYxDJ8tOzVMfIxEtniVcExTg1T7Q:2VfhwYxmoJMfUynu9xUT7Q

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2710f894b73b563d02d700fcb590e21873e42dc4b947ca00114114c7c948dd16N.exe

C:\Users\Admin\AppData\Local\Temp\2710f894b73b563d02d700fcb590e21873e42dc4b947ca00114114c7c948dd16N.exe
"C:\Users\Admin\AppData\Local\Temp\2710f894b73b563d02d700fcb590e21873e42dc4b947ca00114114c7c948dd16N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/596-0-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download