a3ce5dacc75f3746ff4c04bcfc3ea3a8635cb0f99386a6b19b4d4f54d43fc4ab

Analysis

max time kernel
92s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03/09/2024, 01:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a3ce5dacc75f3746ff4c04bcfc3ea3a8635cb0f99386a6b19b4d4f54d43fc4ab.exe
Size

136KB
MD5

9fd2fbddd7b786eecb93616447c59fe6
SHA1

83440ae44987c11f09453252631ab6a21a5ddd69
SHA256

a3ce5dacc75f3746ff4c04bcfc3ea3a8635cb0f99386a6b19b4d4f54d43fc4ab
SHA512

f6dc45547a8a85a05a8e88b51efcd86d9ef26757e1659a807e4c68e0dc028c41308ca8987f6fe053b592a7bbba87ed6cc26f4e93d77e3726d48dd0db4ab51522
SSDEEP

3072:6e7WpXYvnh3EQmJ0QmJyHSXIBlf08qySzCeHbw:RqRS/Hs

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a3ce5dacc75f3746ff4c04bcfc3ea3a8635cb0f99386a6b19b4d4f54d43fc4ab.exe

C:\Users\Admin\AppData\Local\Temp\a3ce5dacc75f3746ff4c04bcfc3ea3a8635cb0f99386a6b19b4d4f54d43fc4ab.exe
"C:\Users\Admin\AppData\Local\Temp\a3ce5dacc75f3746ff4c04bcfc3ea3a8635cb0f99386a6b19b4d4f54d43fc4ab.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads