8aea7552d6045506379b01b7ec213dab7b8a3ff5f4a92212488c4370a9f85f18

Analysis

max time kernel
97s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20-08-2024 04:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4be5010d1eb3c3066ce29678bfe6a490N.exe
Size

1.3MB
MD5

4be5010d1eb3c3066ce29678bfe6a490
SHA1

ce625f03c4137e0bafbb09929925f46df5941db4
SHA256

8aea7552d6045506379b01b7ec213dab7b8a3ff5f4a92212488c4370a9f85f18
SHA512

29b9276397a640b504cf4f6353f594f5a29e5c470e91b5339907a302db8626d34029e04655d4a54549d4f0b18eb7fbfb07c1757fd078e4a1cbf4ff82ca03c6b7
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+ek:6e7WpMaxeb0CYJ97lEYNR73e+ek

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4be5010d1eb3c3066ce29678bfe6a490N.exe

C:\Users\Admin\AppData\Local\Temp\4be5010d1eb3c3066ce29678bfe6a490N.exe
"C:\Users\Admin\AppData\Local\Temp\4be5010d1eb3c3066ce29678bfe6a490N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads