bc92e2f0e1755ef40accccf9f6fd3606344334ad9ee4803aeefd6f618043930c

Analysis

max time kernel
100s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/08/2024, 03:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a2bc5f7d3b7f831e8785f27ff94e5c40N.exe
Size

137KB
MD5

a2bc5f7d3b7f831e8785f27ff94e5c40
SHA1

a19bf222e96a3926248de0ee8c0b8962847ba42b
SHA256

bc92e2f0e1755ef40accccf9f6fd3606344334ad9ee4803aeefd6f618043930c
SHA512

08db21d507b45d4c85154343482f18173072137a8aae846bf4a4eda620d3652aff2a652878ee6ffe24ad9f37dafe8196030f1fb8db7e6cdff5317b7e9274b588
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/Nw4xZEhNwNFkNXNFpiFu9Fy2XNgNFVNVNFomFaMn:6pWpBwchcV2IxZW+0JO2XKFbd0c

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a2bc5f7d3b7f831e8785f27ff94e5c40N.exe

C:\Users\Admin\AppData\Local\Temp\a2bc5f7d3b7f831e8785f27ff94e5c40N.exe
"C:\Users\Admin\AppData\Local\Temp\a2bc5f7d3b7f831e8785f27ff94e5c40N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:32

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads