5dc345830e1ce2886eba18680be858ec5f9a523f4e77da7799d49ac7ed9d20de

Analysis

max time kernel
150s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29/08/2024, 02:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5dc345830e1ce2886eba18680be858ec5f9a523f4e77da7799d49ac7ed9d20de.exe
Size

153KB
MD5

e4ce0a37619c9a362a71084832d0e6e2
SHA1

0fa56682dfeb79c072408733f8d50183f73c3370
SHA256

5dc345830e1ce2886eba18680be858ec5f9a523f4e77da7799d49ac7ed9d20de
SHA512

9efe853c970b263865c449451d24ebe7e1e5b5d1da264ddd42b8548c50c150faf5e19b4b5adef3d26cd6474d2d606950b04d4a6e8737a552b2bd61e6cc76f051
SSDEEP

3072:rP7rDbYZInfiwcg0sWlCc6HdlQskc6HcT66vlm1R0ME2Ki5Yl0M72ccc3kc3Jc3c:T7bYZs6wr0NlCc6HkJc6HcT66vlm1R0z

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5dc345830e1ce2886eba18680be858ec5f9a523f4e77da7799d49ac7ed9d20de.exe

C:\Users\Admin\AppData\Local\Temp\5dc345830e1ce2886eba18680be858ec5f9a523f4e77da7799d49ac7ed9d20de.exe
"C:\Users\Admin\AppData\Local\Temp\5dc345830e1ce2886eba18680be858ec5f9a523f4e77da7799d49ac7ed9d20de.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2172

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2172-0-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download