15068bbadfd84bb01250e8e1084a737aaecd102a813905903e61387fd3a0eb8b

Analysis

max time kernel
94s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-09-2024 04:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a1cccf9f101d6d7b9746fd5de38b8910N.exe
Size

41KB
MD5

a1cccf9f101d6d7b9746fd5de38b8910
SHA1

5944f7501db063af224d5f7e4ea8113a2fba1f31
SHA256

15068bbadfd84bb01250e8e1084a737aaecd102a813905903e61387fd3a0eb8b
SHA512

69fbe168db4fd7a6e99c002b0da7db6b1e56e3cf00668d5b5c22f7d4e5d3514c7aba90a5449b8ed25a0c373f80bb74ff29cc8e692f9eb2e6d89d6ae14a431359
SSDEEP

768:DbKaz6v+vOInzOkgUXbCjxLkF7gnWKOr3YioRomqM7VJ:DbKyOGcW7gWKOWomdJ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a1cccf9f101d6d7b9746fd5de38b8910N.exe

C:\Users\Admin\AppData\Local\Temp\a1cccf9f101d6d7b9746fd5de38b8910N.exe
"C:\Users\Admin\AppData\Local\Temp\a1cccf9f101d6d7b9746fd5de38b8910N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2944

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2944-0-0x000000001B000000-0x000000001B010000-memory.dmp

Filesize
64KB

Download
memory/2944-1-0x000000001B000000-0x000000001B010000-memory.dmp

Filesize
64KB

Download