157729c0f840c6452979a121b855d372b28b1c46d41e225dee690fa5ce60ed1c

Resubmissions

27/03/2025, 03:45

250327-ea4w4sw1et 10

27/03/2025, 03:26

250327-dzpcaayny7 10

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27/03/2025, 03:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e28a6d3bdcfdad9ff4c37e6c22c1a52018e5076ec65b128614bcf0e8eb711171_02510000.exe
Size

564KB
MD5

101a628e6b32bff7e99db64bcb1438a3
SHA1

e009162ca42071592d8c98a4ecf59bd2109261cb
SHA256

63249d685d67cc6c2fbff9e469b7b7537f786c2fa1fc33634e28f73315a99d41
SHA512

d7d7d2b5359f12c5183844be9131427c3ccb256c0aca9eb77f273e07ac1d01da6d0f8a73833236da71feef3ba5da775f82d2a4224d2d7b483e97f6674af0b317
SSDEEP

12288:38Malpp/QPcqcGVwwAPfoEQB94Uc1VNzZWPx9YBK3Tdb:38dhQEqcGQfoxGVxIPAIjd

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e28a6d3bdcfdad9ff4c37e6c22c1a52018e5076ec65b128614bcf0e8eb711171_02510000.exe

C:\Users\Admin\AppData\Local\Temp\e28a6d3bdcfdad9ff4c37e6c22c1a52018e5076ec65b128614bcf0e8eb711171_02510000.exe
"C:\Users\Admin\AppData\Local\Temp\e28a6d3bdcfdad9ff4c37e6c22c1a52018e5076ec65b128614bcf0e8eb711171_02510000.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2376

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads