9cf62ffbc957394262d04a1abc8d5aa1c923fe65ac99d84d4681a4fb0e7ec389

Analysis

max time kernel
110s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20-08-2024 07:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b930e53711a8a4d93f6d217ddc5d6e90N.exe
Size

197KB
MD5

b930e53711a8a4d93f6d217ddc5d6e90
SHA1

fca58f43c5c6f241151d0d560b7a08971a81691c
SHA256

9cf62ffbc957394262d04a1abc8d5aa1c923fe65ac99d84d4681a4fb0e7ec389
SHA512

881781d90d58c15e5ade594bebf462194fd0f99f55247e94ab4dcd720c62255b552e07bf2453b110d0441383521405ee499dec7af3aef2d436bfdbee208bedbe
SSDEEP

3072:6DWpwE7oL2e+efZwZ08i8z3MLG7PgUXSAjZIInlxragr/Fgwo:dN/e+efimJa3MLHUi8lxmFX

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b930e53711a8a4d93f6d217ddc5d6e90N.exe

C:\Users\Admin\AppData\Local\Temp\b930e53711a8a4d93f6d217ddc5d6e90N.exe
"C:\Users\Admin\AppData\Local\Temp\b930e53711a8a4d93f6d217ddc5d6e90N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads