2138b641d93bb5d21b3cdc7bdd010449c46fe706174976a855ba26b018921697

Analysis

max time kernel
148s
max time network
151s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
13-11-2024 16:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2138b641d93bb5d21b3cdc7bdd010449c46fe706174976a855ba26b018921697.exe
Size

489KB
MD5

ada60e91c37859c840471a16d0f74cf4
SHA1

027efc277e4c1d7966208e46fdf6256ee91a00b6
SHA256

2138b641d93bb5d21b3cdc7bdd010449c46fe706174976a855ba26b018921697
SHA512

763ff1701e4319364c049f3ea3587cb38cc3e787e05e6a152a93551685563bdcb9623efa270702fe47ed7773ecb9019d053eed9076d25988efb028222fb4122e
SSDEEP

12288:45k+Yqaxrh3Nln+N52fIA4jbsvZGeDA4o:eY9xrh3NDfIA4jOZW

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2138b641d93bb5d21b3cdc7bdd010449c46fe706174976a855ba26b018921697.exe

C:\Users\Admin\AppData\Local\Temp\2138b641d93bb5d21b3cdc7bdd010449c46fe706174976a855ba26b018921697.exe
"C:\Users\Admin\AppData\Local\Temp\2138b641d93bb5d21b3cdc7bdd010449c46fe706174976a855ba26b018921697.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2512

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads