e490213b2ce08d1544e76d7b137d88d1b54545f55206733035ca8a9db9be3659

Analysis

max time kernel
75s
max time network
69s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/08/2024, 10:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

49cb41d4a11d162132056b55e5da14c0N.exe
Size

78KB
MD5

49cb41d4a11d162132056b55e5da14c0
SHA1

eaccaf8877a78c414e91ab8c39a154596b45049c
SHA256

e490213b2ce08d1544e76d7b137d88d1b54545f55206733035ca8a9db9be3659
SHA512

f271d2df148bb6532daf5dc0affe091ad8b01e32d342baeb8389f12ddb1b378fda10b4b7387745d944368f74c5a43e5805c37e6d04dbf96b71fdc7e42fb9a227
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxLTLjOdOFb:6pWpBwchcV2WxLTLjOdOFb

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	49cb41d4a11d162132056b55e5da14c0N.exe

C:\Users\Admin\AppData\Local\Temp\49cb41d4a11d162132056b55e5da14c0N.exe
"C:\Users\Admin\AppData\Local\Temp\49cb41d4a11d162132056b55e5da14c0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...