71971d782125679e1c4d528e1ffdba435e92c570cf22690a83fe9cb0fca5bfeb

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-02-2025 08:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe
Size

469KB
MD5

cb21cf3e8992ce458ad2e763ecc2a8e0
SHA1

3d233e2b782da7135dda6a07dd835ddbb70152a4
SHA256

f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e
SHA512

896e2833fa2b31ae086c1680c8bd53a5aee2bd45ab614bea0e62703086b756ab43aee328dfe77b2659059ccd096a37963ccf6185ecb28651082f296d514b6a1e
SSDEEP

12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSTn9:uiLJbpI7I2WhQqZ7T9

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2448	f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe

C:\Users\Admin\AppData\Local\Temp\f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe
"C:\Users\Admin\AppData\Local\Temp\f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\ios\logs.dat

Filesize
144B

MD5
39cb007e1b1f6a363856b25ccfdb0b12

SHA1
2e6980d64033d3d9b009c7c0124aca62ad10f770

SHA256
c29a514a87feb8da97b95b40905c3389c056e21b4efcc82279d8fe9a9da6db9a

SHA512
f94ee95b85d2c79ee9aee10531b6f024ebe6c7b940fddaf3c265cae31a78f2c9a30d1a3ca469f1ee9e966eae9d1f4514c4b47bdaefd0fedce7d298d0b11be9f7

Download Submit