f981b7027074613ed0f0ff04287d23697f820723cfe4837465e8b71e8a37ec94

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
26/07/2024, 23:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f981b7027074613ed0f0ff04287d23697f820723cfe4837465e8b71e8a37ec94.exe
Size

2.5MB
MD5

2e5afa0f9e130cc2beecd7a2ca370082
SHA1

a7e45388a2bc150fb4822713b9c568684b5ea6fd
SHA256

f981b7027074613ed0f0ff04287d23697f820723cfe4837465e8b71e8a37ec94
SHA512

1010e731b1029c05aa8a49e5eab6360da1d22076016f67c2282b6b2b8c06e0ac5759c64e59b3951bc39b842f23af81027897873c350b98a40d5d9864d34ecac4
SSDEEP

49152:m4kParqqAgDEJBOclpMpCPi9FCLWdQuh:CarkgDcBOcVit

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f981b7027074613ed0f0ff04287d23697f820723cfe4837465e8b71e8a37ec94.exe

C:\Users\Admin\AppData\Local\Temp\f981b7027074613ed0f0ff04287d23697f820723cfe4837465e8b71e8a37ec94.exe
"C:\Users\Admin\AppData\Local\Temp\f981b7027074613ed0f0ff04287d23697f820723cfe4837465e8b71e8a37ec94.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2580

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads