ccc6118252bc6a56c5a9439abf0ab1e6dad374df51c04ef9032ae69c3d0211b3

Analysis

max time kernel
95s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2024, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

pawno/pawncc.exe
Size

15KB
MD5

070bdd0e9591ca498dd6dd86fc2c2147
SHA1

a29cbd5424ab04effdd227a7e1b7524ce65d97f6
SHA256

fe7aff7f59b26eee887b31f9c32bd019a809bc8b6d527d22489a0075a98451b9
SHA512

1f2396d24b2f0dfd4829dbe5650251561ab516117b071b76802cf188fe7c7425332dccd32d9636628ba8e3db5cfc8b679bae8bc3a351a63c200139a4db9b0933
SSDEEP

192:UogbtcmXKiSzriVQ1JMNGeTDT//BWLGeTkGeTGOvs7HlKT/z:UoMimX7SHiV8AGevTnYLGeQGeyVHlU/

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pawncc.exe

C:\Users\Admin\AppData\Local\Temp\pawno\pawncc.exe
"C:\Users\Admin\AppData\Local\Temp\pawno\pawncc.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads