cccdce824faa0744b1db5a1aa1dc0b4d0c25364492bbb7c616c229a3cada4cd2

Analysis

max time kernel
134s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-09-2024 03:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$TEMP/WLANSetEAPUserDatax86.exe
Size

62KB
MD5

1a9ab3d3af02fc841950c439c633a880
SHA1

16e966b35a055689ef8a115f4e11a67a2189f463
SHA256

8d898150dc9f780948cec73a7a9f873a893f3ee6be30bf04e0369b97eabe8465
SHA512

a073eb9d8ed62b76f729f24a446360412779080b01165b183f7b12be4804b0063b6ff79fae7fe138bf847d4941f5960e0e5d8d3468088231117042741d3e9595
SSDEEP

768:d7bEnuQhagleo4yxLhCiH5EnhdgVklrHAIk/8EDV+CnYYmHm1RrZcy:ZEuQhPMyLcnrgVkBxkAM5h9c

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WLANSetEAPUserDatax86.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\WLANSetEAPUserDatax86.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\WLANSetEAPUserDatax86.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads