96f992e0fe0c26790769633f7a90b37052d92217386fd44bce75af34a23b46c2

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
30-11-2024 05:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

96f992e0fe0c26790769633f7a90b37052d92217386fd44bce75af34a23b46c2N.exe
Size

8KB
MD5

15806c5ed81ce61714b551e4d86528f0
SHA1

8a692bd65737182ba76a194e2f6c00289ac07793
SHA256

96f992e0fe0c26790769633f7a90b37052d92217386fd44bce75af34a23b46c2
SHA512

511b8f7dd2ad7cbaa0bccb4f858d6afb26ce2f585651c667ee4c7d35b4fa4db57cec41437cfb0e7a9a2cf55e833d4296ec26ca0555bbbc9f7c45df85ea085a52
SSDEEP

192:dvxJqAPhpeS1ZK4O3CDHdJXzM60lkwiRK:jUAPkgM3lke

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	96f992e0fe0c26790769633f7a90b37052d92217386fd44bce75af34a23b46c2N.exe

C:\Users\Admin\AppData\Local\Temp\96f992e0fe0c26790769633f7a90b37052d92217386fd44bce75af34a23b46c2N.exe
"C:\Users\Admin\AppData\Local\Temp\96f992e0fe0c26790769633f7a90b37052d92217386fd44bce75af34a23b46c2N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads