5eaa1c85b35223236ded3cee7d21ac0356d650d16e0fa3dfec2a1378501c38dc

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
09/08/2024, 02:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5eaa1c85b35223236ded3cee7d21ac0356d650d16e0fa3dfec2a1378501c38dc.exe
Size

724KB
MD5

a48920be44ed27d17163fdbe4bdfaad4
SHA1

a39381b6f7705e1db46b7880c2dd2cbefba77adc
SHA256

5eaa1c85b35223236ded3cee7d21ac0356d650d16e0fa3dfec2a1378501c38dc
SHA512

cda3b0c405cb62553e4b5206a3e87787258a03e21c8f8b6627769654bfaa344bc9311bb3bfe95e46a40acd3fa33cbcd3f26ded5d68a651a0455e48ef8c6af160
SSDEEP

12288:+Gs7WjbXrOWjty2bENv/PxL0/HTfv+sdvnfXXxkOrmJ5:rXa/PxiHTxnfnxkOrE

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5eaa1c85b35223236ded3cee7d21ac0356d650d16e0fa3dfec2a1378501c38dc.exe

C:\Users\Admin\AppData\Local\Temp\5eaa1c85b35223236ded3cee7d21ac0356d650d16e0fa3dfec2a1378501c38dc.exe
"C:\Users\Admin\AppData\Local\Temp\5eaa1c85b35223236ded3cee7d21ac0356d650d16e0fa3dfec2a1378501c38dc.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads