909a74c7a03956c55492863028a975ccf0917f54fab5d4fa8cfa2bfa8e480ed9

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-01-2025 14:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

909a74c7a03956c55492863028a975ccf0917f54fab5d4fa8cfa2bfa8e480ed9.exe
Size

884KB
MD5

fa59fc9d6c2af739eaa63d3af4d6f428
SHA1

0550a7caae5cbe592ada14d028601c95cc9c678b
SHA256

909a74c7a03956c55492863028a975ccf0917f54fab5d4fa8cfa2bfa8e480ed9
SHA512

fd728cf6a59b4db4c1223992c0ed25206da787b8fc0b8622ac875896d2f1f7a24d8596b6e3f825f021f423f60b29cd110ab61f111127df4a95af3a705d8daa57
SSDEEP

24576:uRmJkcoQricOIQxiZY1iaC3zdlP1RtygCmm/:7JZoQrbTFZY1iaCjdagK

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	909a74c7a03956c55492863028a975ccf0917f54fab5d4fa8cfa2bfa8e480ed9.exe

C:\Users\Admin\AppData\Local\Temp\909a74c7a03956c55492863028a975ccf0917f54fab5d4fa8cfa2bfa8e480ed9.exe
"C:\Users\Admin\AppData\Local\Temp\909a74c7a03956c55492863028a975ccf0917f54fab5d4fa8cfa2bfa8e480ed9.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1560-5-0x0000000000A20000-0x0000000000A24000-memory.dmp

Filesize
16KB

Download