5fc2de76755ab476a4cd3880600a556f0f1e2f6117bcf9ae39b136992c55236b

Analysis

max time kernel
136s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/08/2024, 14:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

compiler.exe
Size

203KB
MD5

b10229280d0bec893adc56d42ec7a587
SHA1

fdc0eb4e777261884bce71f7f355a53a9668b93e
SHA256

ec84510bdc365943310a319fa1569302c96a634bc27ef785c5eb2e6b0a7d480c
SHA512

d523b084beec75b84569db6f97c872b64f64a631323cc0be183a9c5424b96ef0fcc43f360d36c575fff992bc0e6a54b4ca32fa4b41ad042e7a10e111274b3d70
SSDEEP

3072:ynvavn6z2TMRXs0I0ziBev6pQBeXEmZQCJeoH6ctzJQel5axhtvbOEUgnuBKn7+X:yva5TMRXs0IKiBDbZt4Ggn77+ez3x8

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	compiler.exe

C:\Users\Admin\AppData\Local\Temp\compiler.exe
"C:\Users\Admin\AppData\Local\Temp\compiler.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3392

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...