9ea264ca52503037ae7935c8cc5f17f8d6c6456e8d8f2d6d7dea71650638d425

Analysis

max time kernel
114s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02/09/2024, 06:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4f00971f288114ade35d5db2897bcff0N.exe
Size 193KB
Sample240902-g9lwpavfqf
SHA256 9ea264ca52503037ae7935c8cc5f17f8d6c6456e8d8f2d6d7dea71650638d425
MD5 4f00971f288114ade35d5db2897bcff0
SHA1 fa6437cc48611aceb1f0741e0271fdc4ab672108
SHA512 6bd24ef5bf431f434f282cacb9ecd8831d51d4821f90392efc49039c0748c143b186393492dcf6b5d15f089288808f29a34264185d1633d2d01d01a0cf4eb0ee
SSDEEP 3072:6e76mQSo7ZLKIKIHSXIBlf08qySzCetFtJSuSSSskCTaqW+0JO2XKFbd0U:RemQSoytJNTaW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4f00971f288114ade35d5db2897bcff0N.exe

C:\Users\Admin\AppData\Local\Temp\4f00971f288114ade35d5db2897bcff0N.exe
"C:\Users\Admin\AppData\Local\Temp\4f00971f288114ade35d5db2897bcff0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4304,i,12198811467968044966,17227406646827438786,262144 --variations-seed-version --mojo-platform-channel-handle=4060 /prefetch:8
1⤵
PID:3908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads