80752d5691028fa97cce567e7bfa5f3416a36603bd1ca85e89d606e42566ad73

Analysis

max time kernel
115s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/08/2024, 12:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

99c40e3bc2942d093714dd97e1f58370N.exe
Size

180KB
MD5

99c40e3bc2942d093714dd97e1f58370
SHA1

b2822f6e9c10347c2a3d4983fb325d0b8a2a6b57
SHA256

80752d5691028fa97cce567e7bfa5f3416a36603bd1ca85e89d606e42566ad73
SHA512

1a94c0b6e256ffded73e9b9bc50d4184945f3fab3ffb64dceae4db1f6a57a9966437f207d7200040af7a01d723e51bba8829fd1aa541d5260a3eff13df31adc0
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eGGgNBljKwOgob0:RqKvb0CYJ973e+eGGgNBlVOk

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	99c40e3bc2942d093714dd97e1f58370N.exe

C:\Users\Admin\AppData\Local\Temp\99c40e3bc2942d093714dd97e1f58370N.exe
"C:\Users\Admin\AppData\Local\Temp\99c40e3bc2942d093714dd97e1f58370N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...