d5f5204efc969b0a9a132413c637f09bce02cff7ea932c504d418e80265158f9

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-12-2024 07:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d5f5204efc969b0a9a132413c637f09bce02cff7ea932c504d418e80265158f9.exe
Size

4.9MB
MD5

ecfdde187846c27fef59c61d42d474b3
SHA1

25d35ff7f5c38626bd77b5cd9fed849fd1186499
SHA256

d5f5204efc969b0a9a132413c637f09bce02cff7ea932c504d418e80265158f9
SHA512

08ac6368aa2857c6201b6812d4adffb7e690f16750bc7b39b3116076fec10aa716c4a868afe9310984ad94f71e65df91fe813ed415f0deee562ceeaf4f800f5e
SSDEEP

98304:HZVS4lyfvsVqltyD5DhADNlXQ2orLmKeLDCVvANLA1pOuI8F7fqLmLhPR6x7:OkPD52

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d5f5204efc969b0a9a132413c637f09bce02cff7ea932c504d418e80265158f9.exe

C:\Users\Admin\AppData\Local\Temp\d5f5204efc969b0a9a132413c637f09bce02cff7ea932c504d418e80265158f9.exe
"C:\Users\Admin\AppData\Local\Temp\d5f5204efc969b0a9a132413c637f09bce02cff7ea932c504d418e80265158f9.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads