fad8645e7ed745db9f095faff430c93f7106e01423fc0ac74fd29f3921130074

Analysis

max time kernel
114s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2024, 17:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2df761cfd8d290a07a6d6ab30eefc370N.exe
Size

58KB
MD5

2df761cfd8d290a07a6d6ab30eefc370
SHA1

a83a718c84c8f0638df575ae7ecd50c9cb4a6e74
SHA256

fad8645e7ed745db9f095faff430c93f7106e01423fc0ac74fd29f3921130074
SHA512

7aa589a5a43c48e7c6e469668559004d4be3329be3c8664a11a8abbfa7cbdb93e47dd741cbc8e368f3c8c1e6de522520303b086bf923f2b6909df506c09596c1
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFew/DbAGw/DbA9qoPMqoP9Mj+:W7ZppApBULcfpHLcfpyDoAjyGj+

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2df761cfd8d290a07a6d6ab30eefc370N.exe

C:\Users\Admin\AppData\Local\Temp\2df761cfd8d290a07a6d6ab30eefc370N.exe
"C:\Users\Admin\AppData\Local\Temp\2df761cfd8d290a07a6d6ab30eefc370N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4460,i,4174666705242427184,7333705955694532165,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:8
1⤵
PID:4440

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads