aabb636a55f361da5a68b000617a16ec5071e441d134a2a46efa9757b6585449

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
10/08/2024, 01:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

aabb636a55f361da5a68b000617a16ec5071e441d134a2a46efa9757b6585449.exe
Size

53KB
MD5

d00692278826a2594add25d6843f18f4
SHA1

961b5f33f0d650e3522de014e287d80ec6a4d87c
SHA256

aabb636a55f361da5a68b000617a16ec5071e441d134a2a46efa9757b6585449
SHA512

ce0d7d88a4d4777455270ef4cd6c27036a1e2a0753eb5403ad2d4b72e5b7824b313984362ee464115cabac30a294a3b56b52b408a5e64ade66c2660048d41d44
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LObC8p8bkUkJzN:W7ZhA7pApM21LOA1LOgkUkb

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aabb636a55f361da5a68b000617a16ec5071e441d134a2a46efa9757b6585449.exe

C:\Users\Admin\AppData\Local\Temp\aabb636a55f361da5a68b000617a16ec5071e441d134a2a46efa9757b6585449.exe
"C:\Users\Admin\AppData\Local\Temp\aabb636a55f361da5a68b000617a16ec5071e441d134a2a46efa9757b6585449.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads