d3bbefd589e6ef737e98b1cadb84bf34b66434dcc077d33d8ea1507368902dc1

Analysis

max time kernel
108s
max time network
137s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
06-08-2024 01:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

resources/app.asar.unpacked/node_modules/node-notifier/vendor/notifu/notifu.exe
Size

236KB
MD5

768be651d0150677c793a13f62a1c959
SHA1

9077d7a99f298e2325e75f176bb4893847c0b6c8
SHA256

a8914dffc20db1a83b405daf881f3f8b4acc67368c6b2c02fb26600a2aa3d571
SHA512

d65410ee21f3a9fa314aeb35a27ac4c92a7786473099671819b20fa256621dc508839ab0c80ca519e9d45db97acda4ce71912f343d8ef21e6e6a80c85b23d9db
SSDEEP

3072:HN3+5W1c2DVmlXHPW6Rlsw2iV/14eQH4Xh0Mj48oQrYqk:HNO5W1cTBN52iVSTdNU

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	notifu.exe

C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe
"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads