746183dc765538e0dbdf7ef1929114485b97ef01af4c4db94c5bdb2294bd2a04

Analysis

max time kernel
138s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18/08/2024, 00:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

746183dc765538e0dbdf7ef1929114485b97ef01af4c4db94c5bdb2294bd2a04.exe
Size

91KB
MD5

ebea2f1971b162350dc9ad1ad51af72e
SHA1

6c5f404913c2125fba093bf2cc70a1d186dcc05e
SHA256

746183dc765538e0dbdf7ef1929114485b97ef01af4c4db94c5bdb2294bd2a04
SHA512

17b63d3c1df985f9f4addcee930a0924cbf06d1904d49b240976d4d0ad3a1ccab71f7da97338fd99e1dacba8f40a5b884499e8d84bbbfe5b6c04215bc0991e64
SSDEEP

1536:/7ZQpApwYcUYcBsDuyVADUMTdtUiO16BcMXQPpx04ByO/KFZ:9QWpNssp8sQpxSO/Kr

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	746183dc765538e0dbdf7ef1929114485b97ef01af4c4db94c5bdb2294bd2a04.exe

C:\Users\Admin\AppData\Local\Temp\746183dc765538e0dbdf7ef1929114485b97ef01af4c4db94c5bdb2294bd2a04.exe
"C:\Users\Admin\AppData\Local\Temp\746183dc765538e0dbdf7ef1929114485b97ef01af4c4db94c5bdb2294bd2a04.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4396

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4396-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4396-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download