4c9acf9fa885bf772564bfaa6771b776b45d0e8daa3ce0bf89b05f4d87085686

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
22/12/2024, 00:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dxdllreg.exe
Size

78KB
MD5

967240f77a123434ce212ed77276dea1
SHA1

ac1ff591a5ba91b382578fb9f9b38d2de6379bf6
SHA256

b6f134915bac6d630adb04d69f6944462bf5adfce2182f2908c2fb1bdd2da2fb
SHA512

30efe2e1e3e8221a0b368eec5a7e030efb04fd3f4f9d3f678d0eb2f7af1c5d5484d8bd7c8bcfd0bf349b87a34e6d779e7966fe004c7defa12eee4a33bc51af07
SSDEEP

1536:c3yqLKmzPYxsbQwTu9pS7OOC8c4aEuW/jGboizXyz36WBAOMhowYkrgHB3DSSSS7:wyqLKmzPYxt9PJh4aEuWKbx7WmDhDgHF

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Logs\DirectX.log	dxdllreg.exe
File opened for modification	C:\Windows\Logs\DXError.log	dxdllreg.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dxdllreg.exe

C:\Users\Admin\AppData\Local\Temp\dxdllreg.exe
"C:\Users\Admin\AppData\Local\Temp\dxdllreg.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:2404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\Logs\DXError.log

Filesize
467B

MD5
6560d0e6db48a999fec58bf78bfc6b4c

SHA1
2e60f5481ef8eba36371f1d8f8e655b0ccd3c0b8

SHA256
1179ce6599e6cd89f46cb1fa42ceb9ea08fb2ed215cfb58b7eaedc3bd70ea678

SHA512
379c9b394fbe680e4fb288ffd01f1dfa3fe229a7c780b32b193fbbef8ba4a9e49266efa2b88d28ced2e895419646592d3f20c751abfe0d6ab1c61823c61de5a4

Download Submit