80d4652df1fde108dc9755c4779e0d69b7ab8c4454d818a5c33d8d5931abeebf

Analysis

max time kernel
115s
max time network
117s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/08/2024, 10:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

215b9f42e711acad2f37a43fc4b98e20N.exe
Size

86KB
MD5

215b9f42e711acad2f37a43fc4b98e20
SHA1

987fcc15835f26640a4a3ae61ff4448a146fdcae
SHA256

80d4652df1fde108dc9755c4779e0d69b7ab8c4454d818a5c33d8d5931abeebf
SHA512

7d4a1ed0713ec30ae1bb71ac097031ef02e9a046a542c9c3562ab0f77ec767656ad4754cf5113972a9cf911207451a031e21ae4a9b8406fcb588b576d7e1d77c
SSDEEP

1536:W7ZppApBE4p6WYcUYc2fsHSXIBlE3hha08yZySzCeRSZ7Mh:6pWpBZfsHSXIBlf08qySzCeRS2h

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	215b9f42e711acad2f37a43fc4b98e20N.exe

C:\Users\Admin\AppData\Local\Temp\215b9f42e711acad2f37a43fc4b98e20N.exe
"C:\Users\Admin\AppData\Local\Temp\215b9f42e711acad2f37a43fc4b98e20N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads