00be613215d7a969e291b7f1a50b3c67faba732e9e5e3e66bd5856f79d970693

Analysis

max time kernel
140s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
10/08/2024, 11:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

keygen.exe
Size

18KB
MD5

f40a72bbaa8d1fed8bc84547be8d4193
SHA1

cd433684bc96ed445bee198186831b81b58808a8
SHA256

fe8331b2da5046cc8c7d68ce1fe554c1f3cc77fe5c60e4611255d58718b16806
SHA512

7a788a86f41aa99cece501449870cc1d97418e5a2e30ea547c2796aa243426447f9b2a0c0646de6d4e2300cc2a4695077a0b300031098b0a36d2346b8efe612a
SSDEEP

384:AgMenH+Lsg92yOZ1NktfySYfdyzJV1qO84zA+ofW67L7uyXWO/:OeeAg9P/d5Yly9V1P8Ok/SyX

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	keygen.exe

C:\Users\Admin\AppData\Local\Temp\keygen.exe
"C:\Users\Admin\AppData\Local\Temp\keygen.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4712-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download