243eb9783a5c477e4398f85f27db1235d8b2ecabe3fa5af459dc63e21df0dc86

Analysis

max time kernel
130s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2024, 04:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

undetek-v6.9.6.4.exe
Size

90KB
MD5

7b72ed87f1f151c40e356d384522e0f9
SHA1

30b027ac7025a7f89e2cd0f75be44a323f55883c
SHA256

243eb9783a5c477e4398f85f27db1235d8b2ecabe3fa5af459dc63e21df0dc86
SHA512

915aedb8f41a56d4723d7d997d8351a0ed631f0d98f27d1e723ccbb9389efe230552f81ec24728835ca4fde71d4b1a127f92c39c6c78ae2dc91b1fc8725eab97
SSDEEP

1536:L0Chj8TdIIvZRjpvqcl/3rTaCb/ywP7OY9q2O2ItwnHSpH0eAe+Lw:L0J6qsM3na8/l7OYc2pns0E+L

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	undetek-v6.9.6.4.exe

C:\Users\Admin\AppData\Local\Temp\undetek-v6.9.6.4.exe
"C:\Users\Admin\AppData\Local\Temp\undetek-v6.9.6.4.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads