24ad464da4fc0e5e68dc417dbe3aaa3fd1e54085cc8a271d2d1fbc496edabf2a

Analysis

max time kernel
96s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2024, 20:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

24ad464da4fc0e5e68dc417dbe3aaa3fd1e54085cc8a271d2d1fbc496edabf2a.exe
Size

83KB
MD5

ad30e38bd59836660c803ce549821d65
SHA1

44fb5ac739bfbd3e0bbdc3ff17621ce1ccd24765
SHA256

24ad464da4fc0e5e68dc417dbe3aaa3fd1e54085cc8a271d2d1fbc496edabf2a
SHA512

e03b5f97603e5cb92aae640ab0de2a8524a6efdc99646c793df8c86b287919a92e78131850291fee598d88111b777a4cb821fd32863817a9b654ba2f5564662c
SSDEEP

1536:/7ZQpApze+eJfFpsJOfFpsJ5DdZ/D5zf6ydyf+abMkF24kzK3jbrCkoRWNkzZ/D5:9QWpze+eJfFpsJOfFpsJ5DdZ/D5zf6yH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	24ad464da4fc0e5e68dc417dbe3aaa3fd1e54085cc8a271d2d1fbc496edabf2a.exe

C:\Users\Admin\AppData\Local\Temp\24ad464da4fc0e5e68dc417dbe3aaa3fd1e54085cc8a271d2d1fbc496edabf2a.exe
"C:\Users\Admin\AppData\Local\Temp\24ad464da4fc0e5e68dc417dbe3aaa3fd1e54085cc8a271d2d1fbc496edabf2a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3360

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3360-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3360-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download