eef70ce83d3ced587dc9c89ebf459a622ce133d950fdd4a4a50a5959a57ec1ab

Analysis

max time kernel
92s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2024 16:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e110f02d9a9dfd99b83d14d737da6930N.exe
Size

468KB
MD5

e110f02d9a9dfd99b83d14d737da6930
SHA1

ef4daf6bec370ed5bf13635be7b973cd55a17641
SHA256

eef70ce83d3ced587dc9c89ebf459a622ce133d950fdd4a4a50a5959a57ec1ab
SHA512

cee3f83bb5ca323cbaa6c325233a25b2b4164c4f06318e1969537cf3965ebd201cd0b333cd5dcd13f004a505c3fb27dbedfd5213782c70cea23dd8897623a650
SSDEEP

3072:fbENogLaTY8U2bYlYz5jffXEChYcIpBnmHevVpoUoc3VRdRS0lz:fb2o71U2WY1jff303gUoyfdRS

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e110f02d9a9dfd99b83d14d737da6930N.exe

C:\Users\Admin\AppData\Local\Temp\e110f02d9a9dfd99b83d14d737da6930N.exe
"C:\Users\Admin\AppData\Local\Temp\e110f02d9a9dfd99b83d14d737da6930N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4848-0-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/4848-1-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download