b06ddffdc6c7da2ba0e637228b48ca2a470aa8919707b8d22f68e68e83196ba6

Analysis

max time kernel
147s
max time network
151s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/12/2024, 10:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1733479274764e7b4f05da07e19f78d3cf31f2aafa2f5d7a78af2fd18749e25dbbc1473b66785.dat-decoded.exe
Size

481KB
MD5

03f3bfadc5679a6f341d5a7a492f2d9c
SHA1

27ad31c8048ac0edf34d3fc3f9552dafc3758ea9
SHA256

b06ddffdc6c7da2ba0e637228b48ca2a470aa8919707b8d22f68e68e83196ba6
SHA512

fd3ee38ffe1d7e552caf2e24dd15ac6cf86d2d52897d75ce2ebbe54110dc52dcb953a6ce0df655dab882ced3841f40c27eb498ba099dc489d5a515f7d5595cf2
SSDEEP

12288:tuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSA+DY:g09AfNIEYsunZvZ19ZPs

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1733479274764e7b4f05da07e19f78d3cf31f2aafa2f5d7a78af2fd18749e25dbbc1473b66785.dat-decoded.exe

C:\Users\Admin\AppData\Local\Temp\1733479274764e7b4f05da07e19f78d3cf31f2aafa2f5d7a78af2fd18749e25dbbc1473b66785.dat-decoded.exe
"C:\Users\Admin\AppData\Local\Temp\1733479274764e7b4f05da07e19f78d3cf31f2aafa2f5d7a78af2fd18749e25dbbc1473b66785.dat-decoded.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2128

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...