a3cf73d296d5910dd7da2ff4effc66f206bb08bafe8ce3d5f89c7ba67716fb88

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18/08/2024, 13:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Converter/All Media To Mp3 Converter Pro.exe
Size

438KB
MD5

23978b0a11d16652dd38de8659460c8b
SHA1

c248ce8f7224daac3de36f74021a12b9c227c2cc
SHA256

dbc3716da0959319b28521b8dded5c7eb8343e0a8d731eda55f6d0676136ac18
SHA512

d538ffe6f3ca3d680f8386380bc66d2d4db89c0d9db499d7180303aded4c9f1fda668a7c6e6937bfa8cdd06f63abf4b42e78702252d057206ce67f0823899e62
SSDEEP

12288:QhlJmyshkFqsEIofqMmkv2HtG11oF1d+73e:QoysfjqxkvX1oGe

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	All Media To Mp3 Converter Pro.exe

C:\Users\Admin\AppData\Local\Temp\Converter\All Media To Mp3 Converter Pro.exe
"C:\Users\Admin\AppData\Local\Temp\Converter\All Media To Mp3 Converter Pro.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4252-0-0x0000000000400000-0x000000000061E000-memory.dmp

Filesize
2.1MB

Download