ea9674a92d8fc4a92425b5e666ee6c4718b2df6a2804629e54f1a1a22f2a4e29

Analysis

max time kernel
104s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2024, 08:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

247bde1a7370dff4b73f220afa1e3f50N.exe
Size

54KB
MD5

247bde1a7370dff4b73f220afa1e3f50
SHA1

17861f5d6994381b45d669edd3fbde4627da6dff
SHA256

ea9674a92d8fc4a92425b5e666ee6c4718b2df6a2804629e54f1a1a22f2a4e29
SHA512

4e4459a2f9fda8c38ae43b0ec0e44d44acde82213dc7935df833e3d8c8e71ffa4bbe7a65b6022a36084688366ed6aa9d2a20cb293f9d2e501e4de115bc16ecb5
SSDEEP

768:W7BlpNLpARFbhblkYlkuvIYFdqRHR0UkU2U4e9f/POxm88GcxinoAlnDHIMI:W7ZNLpApCZuvIYXqRHR99Pc9I

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	247bde1a7370dff4b73f220afa1e3f50N.exe

C:\Users\Admin\AppData\Local\Temp\247bde1a7370dff4b73f220afa1e3f50N.exe
"C:\Users\Admin\AppData\Local\Temp\247bde1a7370dff4b73f220afa1e3f50N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:840

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...