f0942db0a631ed96700e36f97a5c98983d2116a40462e6b9f5e68248cb5ab401

Analysis

max time kernel
106s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22/08/2024, 19:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d328a069e58edfb3de9d921b3688e9e0N.exe
Size

142KB
MD5

d328a069e58edfb3de9d921b3688e9e0
SHA1

8888f1d6cef64e53c209757b2f89dd380f52f85e
SHA256

f0942db0a631ed96700e36f97a5c98983d2116a40462e6b9f5e68248cb5ab401
SHA512

b30fc13058c02c3a0af48a45fb5b9e62c569100154724be05ae56a1187636b17d89552e824bb08835c0731b77a6abd7125ef0aebdef7574e56432817d236d8f8
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxCSuEhNwNFkNXNFpiFu9Fy2XNgNFVNVNFomFU:6pWpBwchcV2WxSW+0JO2XKFbd0t

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d328a069e58edfb3de9d921b3688e9e0N.exe

C:\Users\Admin\AppData\Local\Temp\d328a069e58edfb3de9d921b3688e9e0N.exe
"C:\Users\Admin\AppData\Local\Temp\d328a069e58edfb3de9d921b3688e9e0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...