0b1d7e78a1d0f4fde571ac7f79ef8a1544e2b5d59ed7de28074131931f678ecb

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/09/2024, 05:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7b49271cdc8e5fe2e42f6829687ecef0N.exe
Size 123KB
Sample240905-ghey3aterm
SHA256 0b1d7e78a1d0f4fde571ac7f79ef8a1544e2b5d59ed7de28074131931f678ecb
MD5 7b49271cdc8e5fe2e42f6829687ecef0
SHA1 4f3093fdca967bbc07066d5bc69f33682f7cdc3b
SHA512 9fc8e00c32e8953e5f36f9980023216639d27ebe6009de472252b33755a7f2c98e5d4247bac2992fc8e65279c85858c116a4675693e0b569faa922dee1d248b3
SSDEEP 1536:W7ZppApBULcfpHLcfpyD4DdCKScZbigB+Vqvxrh:6pWpBwchcwDzcR5p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7b49271cdc8e5fe2e42f6829687ecef0N.exe

C:\Users\Admin\AppData\Local\Temp\7b49271cdc8e5fe2e42f6829687ecef0N.exe
"C:\Users\Admin\AppData\Local\Temp\7b49271cdc8e5fe2e42f6829687ecef0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads