1c2f414e09126d70828ddca4e1105a232dd4732ae93d3a0d757dc48bde6352c5

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
02/08/2024, 04:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

539424d9db7ef82c5b5139608d3cc300N.exe
Size

62KB
MD5

539424d9db7ef82c5b5139608d3cc300
SHA1

2b9df6c51c4b66cf3a0d9556d38146ab5c69e4ab
SHA256

1c2f414e09126d70828ddca4e1105a232dd4732ae93d3a0d757dc48bde6352c5
SHA512

d71e5dd98de5845199c14b87549095148604b4f0ef05239a320879a149bbad0d376feb57873741fd811c0d72a6d878a24b5cf95ad5d9373d4b11b28da994a643
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw70EXBwzEXBwcJdkCKPuJdkCKPi:W7ZppApAJdkCKPuJdkCKPi

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	539424d9db7ef82c5b5139608d3cc300N.exe

C:\Users\Admin\AppData\Local\Temp\539424d9db7ef82c5b5139608d3cc300N.exe
"C:\Users\Admin\AppData\Local\Temp\539424d9db7ef82c5b5139608d3cc300N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads