22442433e3693bd8cb396c20c1ecd6cc59020c348e51bbd942ddca814d86748d

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2024, 23:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c756a2dd5952667198b146aa1a5e4fe0N.exe
Size 44KB
Sample240901-28g7bsvbqr
SHA256 22442433e3693bd8cb396c20c1ecd6cc59020c348e51bbd942ddca814d86748d
MD5 c756a2dd5952667198b146aa1a5e4fe0
SHA1 2a89c6e4c818c95d9e1a9a0c22c279c6d22aeccf
SHA512 bccce2de36f7ed5b57ed47d25eb4847a90435d2ab8be748032e6915095cbcf324ee996768d25c36356638b9a5319f985073b97d227dbc7afa8081546b851b13b
SSDEEP 768:hoNI1mYXVDlVf5pTSkelXIqWoBP1t2a6aEAE9puSjgHZh:hoNIPfPyIqfBP10sZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c756a2dd5952667198b146aa1a5e4fe0N.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2596	c756a2dd5952667198b146aa1a5e4fe0N.exe
2596	c756a2dd5952667198b146aa1a5e4fe0N.exe

C:\Users\Admin\AppData\Local\Temp\c756a2dd5952667198b146aa1a5e4fe0N.exe
"C:\Users\Admin\AppData\Local\Temp\c756a2dd5952667198b146aa1a5e4fe0N.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads