c4c8d01f9ba183817f2d7141bca2ce68de7a1c0ac7bfb07b36358e4933744fa1

Analysis

max time kernel
144s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 16:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c4c8d01f9ba183817f2d7141bca2ce68de7a1c0ac7bfb07b36358e4933744fa1.exe
Size

9KB
MD5

bed3dae18888fbac0d6c2e5f487e22d0
SHA1

e17e5f330556607ca841e7ec6d1b57bd32c2bf68
SHA256

c4c8d01f9ba183817f2d7141bca2ce68de7a1c0ac7bfb07b36358e4933744fa1
SHA512

8547c35c50ab43691505329599e288a28f785fe4ab1bbbed2e8888caab5badffa5fe4269bec2a4993731b4329369e12469620f7b84605f229b4cd1d5cf074469
SSDEEP

192:XfjbHjf3wZQLjO8DzCnWDt7E5pz67MwjKZ:XfDfgZyjDWgt7LG

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c4c8d01f9ba183817f2d7141bca2ce68de7a1c0ac7bfb07b36358e4933744fa1.exe

C:\Users\Admin\AppData\Local\Temp\c4c8d01f9ba183817f2d7141bca2ce68de7a1c0ac7bfb07b36358e4933744fa1.exe
"C:\Users\Admin\AppData\Local\Temp\c4c8d01f9ba183817f2d7141bca2ce68de7a1c0ac7bfb07b36358e4933744fa1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...